Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 3 question 47 discussion

Actual exam question from Microsoft's AZ-104

Question #: 47
Topic #: 3

DRAG DROP -
You have an Azure subscription that contains the storage accounts shown in the following table.

You plan to use AzCopy to copy a blob from container1 directly to share1.
You need to identify which authentication method to use when you use AzCopy.
What should you identify for each account? To answer, drag the appropriate authentication methods to the correct accounts. Each method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Show Suggested Answer

Suggested Answer:

Box 1: A shared access signature (SAS) token.
You can provide authorization credentials by using Azure Active Directory (AD), or by using a Shared Access Signature (SAS) token.
For Blob storage you can use Azure AD & SAS.
Note: In the current release, if you plan to copy blobs between storage accounts, you'll have to append a SAS token to each source URL. You can omit the SAS token only from the destination URL.
Box 2: A shared access signature (SAS) token.
For File storage you can only use SAS.
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10

by EleChie at Aug. 31, 2022, 8:23 a.m.

Comments

Submit Cancel

NaoVaz

Highly Voted 2 years, 9 months ago

1) A shared access signature (SAS) token 2) A shared access signature (SAS) token Blob Storage: Support both Azure Active Directory (AD) and Shared Access Signature (SAS) token. File Storage: Only Shared Access Signature (SAS) token is supported. Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10?toc=%2Fazure%2Fstorage%2Fblobs%2Ftoc.json#authorize-azcopy

upvoted 57 times

RougePotatoe

2 years, 4 months ago

So according to the resource you linked that is for authorization not authentication. The question currently explicitly asked for authentication. It seems Microsoft is using authorization too liberally. "You can provide authorization credentials by using Azure Active Directory (AD), or by using a Shared Access Signature (SAS) token."

upvoted 3 times

...

mtc9

Highly Voted 1 year, 9 months ago

To storage1, you could authenticate with Access Key, SAS and AAD, but Storage1 has disabled public access, so you can't access it with AzCopy even authenticated. However in SAS toiken you can specify authorized IP range from which you can use your access. Access Key and AAD don;t have that option, hence the only possible authorization method for storage1 is SAS.

upvoted 16 times

...

[Removed]

Most Recent 9 months, 3 weeks ago

CORRECT

upvoted 2 times

...

tashakori

1 year, 3 months ago

- A shared access key (SAS) Token - Anonymous

upvoted 1 times

...

Wojer

1 year, 4 months ago

.\azcopy.exe copy 'https://STORAGEACCOUNTNAME.blob.core.windows.net/test2/1.html?SASKEY' 'https://STORAGEACCOUNTNAME.file.core.windows.net/testa/f1/1.html?SASKEY'

upvoted 1 times

...

NU88

1 year, 6 months ago

Shouldn't the Oath authentication also be right for Blob storage source? The Oath technically is Azure AD ( or entra ID ) authentication which is supported for blob storage/AZCopy.

upvoted 6 times

...

Aniruddha_dravyakar

1 year, 9 months ago

Answer is SAS for both.. most secured way to copy files

upvoted 1 times

...

dargin

1 year, 10 months ago

1.SAS 2.SAS https://learn.microsoft.com/en-us/azure/storage/common/storage-ref-azcopy-copy Azure Blob (SAS or public) -> Azure Blob (SAS or OAuth authentication) Azure Blob (SAS or OAuth authentication) -> Azure Blob (SAS or OAuth authentication) - See Guidelines. Azure Blob (SAS or public) -> Azure Files (SAS) Azure Files (SAS) -> Azure Files (SAS) Azure Files (SAS) -> Azure Blob (SAS or OAuth authentication)

upvoted 4 times

cosmicT73

5 months, 2 weeks ago

for storage 1 why it is SAS and not OAuth (AD enabled ) ? i think that since it is not publicly accessible then we omit the anonymous type but ti can be either SAS or OAuth , isnt it ?

upvoted 1 times

...

Mehedi007

1 year, 10 months ago

1) SAS 2) SAS source -> destination Azure Files (SAS) -> Azure Files (SAS) https://learn.microsoft.com/en-au/azure/storage/common/storage-ref-azcopy-copy#synopsis https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10#authorize-azcopy

upvoted 1 times

Mehedi007

1 year, 10 months ago

Sorry! I copied the wrong one by mistake. The right one: Azure Blob (SAS or public) -> Azure Files (SAS) The correct answer is still: SAS & SAS

upvoted 1 times

...

itguyeu

1 year, 12 months ago

I used free version access for this site and it helped me pass the exam. Some questions that I had on the exams, I took the exam more than once, are not available under the free tier access, but 80% of the questions came from here. I do recommend investing a bit of money and getting full access to this site. I didn't memorise answers but analysed them and studied as Microsoft does tweak them a bit. This Q was on the exam.

upvoted 4 times

...

paridao

2 years ago

Answer is wrong, the correct is: 1) A shared access signature (SAS) token, Oauth 2) A shared access signature (SAS) token See here: https://learn.microsoft.com/en-au/azure/storage/common/storage-ref-azcopy-copy in detail the line: local <-> Azure Blob (SAS or OAuth authentication) Remember that Oauth can use AD, see here: https://learn.microsoft.com/en-us/azure/storage/files/authorize-oauth-rest?tabs=portal "Azure Files OAuth over REST (preview) enables admin-level read and write access to Azure file shares for users and applications via the OAuth authentication protocol, using Azure Active Directory (Azure AD)..."

upvoted 3 times

Mehedi007

1 year, 10 months ago

You're referring to the wrong line. The correct line for (source -> destination) is: Azure Files (SAS) -> Azure Files (SAS). So the correct answer is SAS, & SAS.

upvoted 1 times

Mehedi007

1 year, 10 months ago

Sorry! I also copied the wrong one by mistake. The right one: Azure Blob (SAS or public) -> Azure Files (SAS) The correct answer is still: SAS & SAS

upvoted 1 times

...

Andreas_Czech

2 years ago

Answer not correct. regarding MS is Blob accessed by AAD or SAS. SAS is uses for Field 2 and regarding the MS Article is OAuth used with Azure AD https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory Correct must be: Field 1: OAuth Field 2: shared access signature (SAS) token

upvoted 2 times

...

AzZnLuVaBoI

2 years, 2 months ago

On the Exam 3/29/23.

upvoted 13 times

Romancc

2 years, 2 months ago

I hope you passed

upvoted 4 times

...

Spam101198

2 years, 3 months ago

Blob Storage: Support Azure Active Directory (AD) and Shared Access Signature (SAS) token. File Storage: Only Shared Access Signature (SAS) token is supported.

upvoted 5 times

...

vbohr899

2 years, 3 months ago

Cleared Exam today 26 Feb, This question was there in exam.

upvoted 9 times

...

zellck

2 years, 4 months ago

1. SAS token 2. SAS token https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10#option-2-use-a-sas-token Option 2: Use a SAS token - You can append a SAS token to each source or destination URL that use in your AzCopy commands.

upvoted 5 times

...

XristophD

2 years, 6 months ago

I thing it is SAS token (only) for both, looking at the following documentation: https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview#when-to-use-a-shared-access-signature "Additionally, a SAS is required to authorize access to the source object in a copy operation in certain scenarios: ... When you copy a blob to a file, or a file to a blob. You must use a SAS even if the source and destination objects reside within the same storage account." 1) could be SAS and AD, but stated under above link SAS needs to be provided for source when copying to a FileShare 2) definitely SAS token, since AD Auth is not supported by FileShare

upvoted 3 times

...

Load full discussion...