Exam AZ-300 All Questions

View all questions & answers for the AZ-300 exam

Exam AZ-300 topic 1 question 43 discussion

Actual exam question from Microsoft's AZ-300

Question #: 43
Topic #: 1

SIMULATION -
Click to expand each objective. To connect to the Azure portal, type https://portal.azure.com in the browser address bar.

When you are finished performing all the tasks, click the "˜Next' button.
Note that you cannot return to the lab once you click the "˜Next' button. Scoring occur in the background while you complete the rest of the exam.

Overview -
The following section of the exam is a lab. In this section, you will perform a set of tasks in a live environment. While most functionality will be available to you as it would be in a live environment, some functionality (e.g., copy and paste, ability to navigate to external websites) will not be possible by design.
Scoring is based on the outcome of performing the tasks stated in the lab. In other words, it doesn't matter how you accomplish the task, if you successfully perform it, you will earn credit for that task.
Labs are not timed separately, and this exam may have more than one lab that you must complete. You can use as much time as you would like to complete each lab. But, you should manage your time appropriately to ensure that you are able to complete the lab(s) and all other sections of the exam in the time provided.
Please note that once you submit your work by clicking the Next button within a lab, you will NOT be able to return to the lab.

To start the lab -
You may start the lab by clicking the Next button.
You plan to store media files in the rg1lod8322490 storage account.
You need to configure the storage account to store the media files. The solution must ensure that only users who have access keys can download the media files and that the files are accessible only over HTTPS.
What should you do from the Azure portal?

Show Suggested Answer

Suggested Answer: See solution below.
We should create an Azure file share.
Step 1: In the Azure portal, select All services. In the list of resources, type Storage Accounts. As you begin typing, the list filters based on your input. Select
Storage Accounts.
On the Storage Accounts window that appears.
Step 2: Locate the rg1lod8322490 storage account.
Step 3: On the storage account page, in the Services section, select Files.

Step 4: On the menu at the top of the File service page, click + File share. The New file share page drops down.
Step 5: In Name type myshare. Click OK to create the Azure file share.
References:
https://docs.microsoft.com/en-us/azure/storage/files/storage-how-to-use-files-portal

by NS at Sept. 23, 2019, 11:12 a.m.

Comments

Submit Cancel

Oz

Highly Voted 5 years, 7 months ago

I think the right solution for this task is creating a blob (container) and not the file share. Here what Microsoft says about purpose of blob storage: "it’s ideal for streaming and storing media" Ref: https://azure.microsoft.com/en-us/services/storage/blobs/ Blob storage supports SAS (session access signature) for HTTPS or combined HTTPS\HTTP access. It can be changed from storage account Settings \ Shared access signatures.

upvoted 48 times

...

JasonYin

Highly Voted 5 years, 4 months ago

Key words: Media File: create a Blob container Access Keys only : to be private container, no need SAS HTTPS : Configuration > Secure transfer required* > Enabled

upvoted 35 times

RiteshAg

5 years, 1 month ago

Perfect Answer, thanks alot.

upvoted 1 times

...

nagendra25may

5 years ago

What about read access ? because the requirement only to allow download. not allow them to create file

upvoted 2 times

...

ExamWynner

4 years, 11 months ago

Thanks Jason, perfect answer.

upvoted 1 times

...

Jaleshwar

Most Recent 4 years, 9 months ago

Selection and Create container under the storage account. set Public Access Level Private.

upvoted 1 times

...

macco455

4 years, 10 months ago

I believe blob container is the right way to go with this since https is enabled by default on there. BUT if the question is asking that you HAVE to use the access keys for hte storage account to access the files, then file share might be a better answer since in order to connect to the file share you will need to does it securely whilst using the access key for the storage account as part of the powershell script to map the drive, Just something to think about for this question

upvoted 2 times

...

ercank

4 years, 10 months ago

Azure Files can use SMB to access the files that is why Blob looks more logical. For enforcing only HTTPS access, Secure Transfer must be enabled btw it is by defualt enabled. I think normal access keys is enough as an for this question.

upvoted 2 times

Bart78

4 years, 9 months ago

Indeed, HTTPS only, default when using containers (Private)

upvoted 1 times

...

AKC11

4 years, 11 months ago

In Storage account Configuration --> Secure transfer required (Enabled ) and Blob public access (Disabled)

upvoted 1 times

...

platanin2003

4 years, 11 months ago

Blobs are recommended to be used for media files, and they can be accessed only via HTTPS - or programming. With File Shares you need to specify a space limit, you can run out of space, more over, you can open a file share using network mapping. Containers are the correct answer

upvoted 1 times

...

tundervirld

4 years, 11 months ago

The documentation of the storage account say, Azure Blob are for Streaming sceneries: Step 1: Create a Blob Storage, or select rg1lod8322490. Step 2: Inside Storage Account. - Select Blob Service section, Container, + Container Button. - Public access level will be Private(to do it: ensure that only users who have access keys ). - HTTPS and Secure transfer required are activated by default. - You can see the Storage account name and Key to be able to use the information, for example in Storage Explorer. *Note:* The only restriction is access keys can download the media files and HTTPS. The question don't say anything about of the files or info permission, only in this case we’ll need to use SAS(Shared access signature) References: https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction#example-scenarios https://www.youtube.com/watch?v=ji2f2YehIB0&feature=youtu.be

upvoted 3 times

...

Sam_samules

5 years ago

Steps followed should be : 1. Create Storage account or open if created already -> Configurations -> Enable Secure Transfer required. If you have doubts please click on 'i ' for more info on the option

upvoted 3 times

...

milind8451

5 years, 1 month ago

Step1: Create blob storage for media files instead of File Storage. Step2: You needn't to do anything because by default it is HTTPS and there is a shared key already created under "Access Keys" blade which can be used for access. if you are not sure whether it is HTTPS or not, just check the access url of storage account and it is HTTPS not HTTP so secured by default. Tested in lab so I verify it.

upvoted 7 times

...

TYT

5 years, 1 month ago

Go to the storage account, add a new container, select blob because media files preferred storage is a blob. You don't have to do anything else because HTTPS is ON by default. You can check by going to SAS and you can see that HTTPS is ON.

upvoted 6 times

...

Noor001

5 years, 1 month ago

@ExamTopics people , could you guys please confirm which one is the correct answer.

upvoted 3 times

milind8451

5 years, 1 month ago

Read my ans above, that is correct. I tested it.

upvoted 1 times

...

milind8451

5 years, 2 months ago

I think blob storage should be created for media files instead of File Storage. For 2nd task you needn't to do anything because by default it is HTTPS and there is a shared key already created under "Access Keys" blade which can be used for access.

upvoted 4 times

...

Sparty

5 years, 3 months ago

Do you need to upload the media files as Block Blob after creation of the Blob container because the container will not contain any blob by default after creation.

upvoted 1 times

...