ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-301 All Questions

View all questions & answers for the AZ-301 exam
Go to Exam

Exam AZ-301 topic 2 question 30 discussion

Actual exam question from Microsoft's AZ-301
Question #: 30
Topic #: 2
[All AZ-301 Questions]

Your network contains an on-premises Active Directory forest named contoso.com. The forest is synced to an Azure Active Directory (Azure AD) tenant named contoso.com and an Azure AD Domain Services (Azure AD DS) domain named contoso-aad.com.
You have an Azure Storage account named Storage1 that contains a file share named Share1.
You configure NTFS permissions on Share1. You plan to deploy a virtual machine that will be used by several users to access Share1.
You need to ensure that the users can access Share1.
Which type virtual machine should you deploy?

  • A. a virtual machine that runs Windows Server 2016 and is joined to the contoso.com domain
  • B. a virtual machine that runs Windows 10 and is joined to the contoso-add.com domain
  • C. a virtual machine that runs Windows 10 and is hybrid Azure AD joined to the contoso.com domain
  • D. an Azure virtual machine that runs Windows Server 2016 and is joined to the contoso-add.com domain
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
You join the Windows Server virtual machine to the Azure AD DS-managed domain, here named contoso-aad.com.
Note: Azure Files supports identity-based authentication over SMB (Server Message Block) (preview) through Azure Active Directory (Azure AD) Domain
Services. Your domain-joined Windows virtual machines (VMs) can access Azure file shares using Azure AD credentials.
Incorrect Answers:
B, C: Azure AD authentication over SMB is not supported for Linux VMs for the preview release. Only Windows Server VMs are supported.
References:
https://docs.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-enable#mount-a-file-share-from-a-domain-joined-vm
by dciti at Oct. 22, 2019, 1:21 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Jake__
Highly Voted 5 years, 7 months ago
What they are looking for is since its NTFS, it needs to be on the same domain or trusted domain. Which is why D is correct, but also has a spelling error contoso-add.com instead of contoso-aad.com
upvoted 10 times
AzureGC
5 years, 7 months ago
D is correct, notice that "D" includes the statement, "Azure virtual machine ..." this clearly denotes the machine must reside in Azure. Whereas the other answers are ambiguous.
upvoted 24 times
cloudoman
5 years, 4 months ago
Correct.
upvoted 1 times
...
Famous_Guy
5 years, 2 months ago
"Azure" is a keyword in D "Azure virtual machine ..."
upvoted 3 times
...
FailureIsnotAnOption
5 years, 1 month ago
Nice catch
upvoted 1 times
...
Load full discussion...
...
exams0123456
4 years, 9 months ago
Okayy.. now that solves my concern.. when we refer to contoso-aad.com then D becomes correct.
upvoted 2 times
...
...
azurecert2021
Most Recent 4 years, 4 months ago
Option A is not azure virtual machine so it can not be an answer whereas D is an azure virtual machine except the spelling mistakes add.com instead of aad.com
upvoted 1 times
dcprice
4 years, 4 months ago
where does it say the VM need to be deployed on azure ? a VM deployed on prem can access the azure file share so A for me.
upvoted 1 times
...
...
glam
4 years, 4 months ago
A. a virtual machine that runs Windows Server 2016 and is joined to the contoso.com domain [D got a typo/mistake contoso-add.com]
upvoted 1 times
glam
4 years, 3 months ago
D. an Azure virtual machine that runs Windows Server 2016 and is joined to the contoso-add.com domain Mention feedback: [D got a typo/mistake contoso-add.com]
upvoted 1 times
...
...
Ideasky
4 years, 5 months ago
D is correct please refer to this tutorial https://docs.microsoft.com/en-us/azure/active-directory-domain-services/tutorial-create-instance
upvoted 1 times
...
wgre
4 years, 6 months ago
"A" is fully supported. "D" is misspelled
upvoted 1 times
...
Qudzie
4 years, 10 months ago
The answer should be A I think the concept of File Sync is being tested and you need a local endpoint point on-prem for ease of access. the domain on D is contoso-add.com instead of contoso-aad.com.
upvoted 2 times
ihustle
4 years, 6 months ago
This is obviously a typo
upvoted 1 times
...
...
Johncena
4 years, 10 months ago
I was wondering why do we need a Server at all. Cant we just mount Share1.
upvoted 2 times
exams0123456
4 years, 9 months ago
I have the same doubt.
upvoted 2 times
...
...
corona2020
5 years ago
Given answer is correct, You need Server OS to support multiple users, Windows 10 has limitation of 20 connections to call it Several
upvoted 1 times
asdfgh1234567
4 years, 11 months ago
that logic doesnt make sense. "several" is three or more. The correct answer is D because it's an "Azure Virtual Machine"
upvoted 1 times
...
...
jcarlos
5 years, 1 month ago
I would say A & D are both correct. From "https://docs.microsoft.com/en-us/azure/storage/files/storage-files-identity-auth-active-directory-enable" you can read : "Azure Files supports identity-based authentication over Server Message Block (SMB) through two types of Domain Services: Azure Active Directory Domain Services (Azure AD DS) and on-premises Active Directory Domain Services (AD DS) (preview)" Since using on-premises Active Directory Domain Services for this purprose is still in preview, D appears to be "more" correct.
upvoted 2 times
...
Rajuuu
5 years, 2 months ago
Its not clear from the question if the Virtual server is on-premise or in Azure Cloud.
upvoted 2 times
...
pw
5 years, 4 months ago
B is correct because you cannot join Windows Server 2016 to an Azure AD domain. Windows 10 you can.
upvoted 1 times
phony
5 years, 4 months ago
it's not azure AD it's AD DS
upvoted 3 times
...
...
dciti
5 years, 8 months ago
zure AD DS authentication over SMB with Azure Files is supported only on Azure VMs running on OS versions above Windows 7 or Windows Server 2008 R2. So wouldn't Windows 10 also be an option here?
upvoted 3 times
MadLad84
5 years, 7 months ago
the question states "a virtual machine that will be used by several users to access Share1" Windows 10 has a concurrent connection limit of 20, this is a very small limit for "Several" users. Windows server does not have this limitation, which makes it a preferable choice.
upvoted 26 times
tartar
4 years, 9 months ago
D is ok
upvoted 1 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel