Exam AI-100 topic 5 question 9 discussion

Actual exam question from Microsoft's AI-100

Question #: 9
Topic #: 5

You are developing a Microsoft Bot Framework application. The application consumes structured NoSQL data that must be stored in the cloud.
You implement Azure Blob storage for the application. You want access to the blob store to be controlled by using a role.
You implement On-premises Active Directory Domain Services (AD DS).
Does this action accomplish your objective?

A. Yes, it does
B. No, it does not

Show Suggested Answer

Suggested Answer: B 🗳️
On-premises Active Directory Domain Services (AD DS) authorization is no supported for Azure Blob storage
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-auth

by Messatsu at July 22, 2021, 2:05 p.m.

Comments

Submit Cancel

rveney

2 years ago

B. No, it does not. Implementing On-premises Active Directory Domain Services (AD DS) alone does not accomplish the objective of controlling access to Azure Blob storage based on a role. On-premises AD DS is designed for managing user accounts, groups, and authentication within an on-premises network. It does not directly integrate with Azure Blob storage to control access based on roles. To achieve role-based access control (RBAC) for Azure Blob storage, you should consider integrating Azure Active Directory (Azure AD) with your application. Azure AD provides a cloud-based identity and access management solution that can be used to define roles, assign permissions, and control access to Azure resources, including Blob storage. By implementing Azure AD integration, you can manage access to Blob storage based on roles defined in Azure AD, granting or restricting access to users or groups based on their assigned roles.

upvoted 1 times

...

Messatsu

3 years, 11 months ago

Correct answer.

upvoted 1 times

...