Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 3 question 25 discussion

Actual exam question from Microsoft's AZ-104

Question #: 25
Topic #: 3

HOTSPOT -
You have an Azure Storage account named storage1 that uses Azure Blob storage and Azure File storage.
You need to use AzCopy to copy data to the blob storage and file storage in storage1.
Which authentication method should you use for each type of storage? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

You can provide authorization credentials by using Azure Active Directory (AD), or by using a Shared Access Signature (SAS) token.
Box 1:
Both Azure Active Directory (AD) and Shared Access Signature (SAS) token are supported for Blob storage.
Box 2:
Only Shared Access Signature (SAS) token is supported for File storage.
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10

by RithuNethra at Dec. 1, 2020, 9:15 a.m.

Comments

Submit Cancel

mlantonis

Highly Voted 4 years, 2 months ago

Correct Answer: You can provide authorization credentials by using Azure Active Directory (AD), or by using a Shared Access Signature (SAS) token. Box 1: Both Azure Active Directory (AD) and Shared Access Signature (SAS) token are supported for Blob storage. Box 2: Only Shared Access Signature (SAS) token is supported for File storage. Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10

upvoted 241 times

KevinR97

1 year, 5 months ago

Now both valid for Fileshare and Blobs https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-files

upvoted 23 times

cosmicT73

7 months ago

File shares can support AD credentials only if the operations are targeting directly files and directories, however if it target the storage account or the file share itself then SAS only is supported..so in that question it is AD &SAS for blob , and SAS only for file storage

upvoted 2 times

...

RishiRawal

2 years, 2 months ago

why not access keys for blob?

upvoted 2 times

obaemf

2 years, 1 month ago

Because AzCopy only supports Azure AD & SAS. AzCopy >> Blob supports both Azure AD & SAS AZCopy >> File supports SAS only

upvoted 10 times

riseme2476

1 year, 6 months ago

I checked this source (https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10#authorize-azcopy) with wayback machine, and now I can say that they edited it after EntraID rebranding. Year ago, there was clear statement about using AD for only blob storage, but now it is not mentioned at all. So I thing now we can you AD for File Shares too. (sorry for bad England btw)

upvoted 8 times

tableton

1 year, 4 months ago

I agree Both Azure Active Directory (AD) and Shared Access Signature (SAS) token https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-authorize-azure-active-directory

upvoted 4 times

...

klexams

2 years, 9 months ago

Emphasising this is in the context of AZcopy

upvoted 3 times

...

joergsi

3 years, 7 months ago

Authorize AzCopy You can provide authorization credentials by using Azure Active Directory (AD), or by using a Shared Access Signature (SAS) token. Use this table as a guide: AUTHORIZE AZCOPY Storage type Currently supported method of authorization Blob storage Azure AD & SAS Blob storage (hierarchical namespace) Azure AD & SAS File storage SAS only

upvoted 15 times

...

waterzhong

Highly Voted 4 years, 7 months ago

upvoted 39 times

...

ddc4b45

Most Recent 1 week, 4 days ago

as 2025 both blob containers and file shares can authenticate using SAS and Entra RBAC for azcopy Box 1: Both Azure Active Directory (AD) and Shared Access Signature (SAS) token are supported for Blob storage. Box 2: Both Azure Active Directory (AD) and Shared Access Signature (SAS) token are supported for file storage. https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-authorize-azure-active-directory

upvoted 1 times

...

bob_az7

5 months, 1 week ago

Box 1: Both Azure Active Directory (AD) and Shared Access Signature (SAS) token are supported for Blob storage Box 2: Both Azure Active Directory (AD) and Shared Access Signature (SAS) token are supported for Blob storage https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-authorize-azure-active-directory

upvoted 2 times

...

vrm1358

8 months, 2 weeks ago

Today, 11 Nov 2024, Microsoft supports for File share, both Azure AD & SAS to authenticate Box 1: Both Azure Active Directory (AD) and Shared Access Signature (SAS) token are supported for Blob storage. Box 2: Both Azure Active Directory (AD) and Shared Access Signature (SAS) token are supported for Blob storage.

upvoted 4 times

...

a3432e2

1 year, 2 months ago

Correct Answer: Box 1: Azure AD & SAS(Blob storage) Box 2: SAS (File storage) There is no recent change to this, the links individuals are posting assuming that File Storage is supported via AD is incorrect.

upvoted 1 times

...

tableton

1 year, 4 months ago

I think this has been updated now, you can use EntraID to azcopy files too "If you want to upload files to an Azure file share, then verify that the Storage File Data Privileged Reader has been assigned to your security principal."

upvoted 1 times

tableton

1 year, 4 months ago

File Storage: "Azure Active Directory (AD) and Shared Access Signature (SAS) only " https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-authorize-azure-active-directory

upvoted 3 times

...

Amir1909

1 year, 4 months ago

Given answer is rigt

upvoted 1 times

...

tashakori

1 year, 4 months ago

Given answer is correct

upvoted 1 times

...

Arash123

1 year, 4 months ago

Finally tested Fileshare vs AzCopy: You cannot copy files to a share by AzCopy when you authenticated via AzureAD. The error is: failed to parse user input due to error: azure files only supports the use of SAS token authentication

upvoted 2 times

...

Amir1909

1 year, 5 months ago

Correct

upvoted 1 times

...

MSBITSM

1 year, 5 months ago

For commands that target files and directories, you can now provide authorization credentials by using Microsoft Entra ID and omit the SAS token from those commands. https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-files?source=recommendations#get-started

upvoted 2 times

...

rajlmok

1 year, 6 months ago

Both Azure Active Directory (AD) and Shared Access Signature (SAS) token are supported for BOTH Blob and File storage.

upvoted 9 times

tableton

1 year, 4 months ago

Agree: https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-authorize-azure-active-directory

upvoted 1 times

...

CarlosMarin

1 year, 11 months ago

This question was in my exam on 31/08/2023.

upvoted 4 times

...

ment0s

1 year, 11 months ago

This question is unclear. There is a difference between what one "should" use, and what all possible options are.

upvoted 2 times

...

Mehedi007

2 years ago

AAD & SAS only for Blob storage. SAS only for File storage. https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10#authorize-azcopy

upvoted 1 times

itismadu

10 months, 1 week ago

From the link provided Authorize AzCopy You can provide authorization credentials by using Microsoft Entra ID, or by using a Shared Access Signature (SAS) token.

upvoted 1 times

itismadu

10 months, 1 week ago

https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-files

upvoted 1 times

...

NYTK

2 years ago

Came in exams 21/7/2023.

upvoted 3 times

...

Load full discussion...