Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us [email protected]
Menu

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
Microsoft Discussions

Exam AZ-104 topic 3 question 47 discussion

Actual exam question from Microsoft's AZ-104
Question #: 47
Topic #: 3
[All AZ-104 Questions]

DRAG DROP -
You have an Azure subscription that contains the storage accounts shown in the following table.

You plan to use AzCopy to copy a blob from container1 directly to share1.
You need to identify which authentication method to use when you use AzCopy.
What should you identify for each account? To answer, drag the appropriate authentication methods to the correct accounts. Each method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1: A shared access signature (SAS) token.
You can provide authorization credentials by using Azure Active Directory (AD), or by using a Shared Access Signature (SAS) token.
For Blob storage you can use Azure AD & SAS.
Note: In the current release, if you plan to copy blobs between storage accounts, you'll have to append a SAS token to each source URL. You can omit the SAS token only from the destination URL.
Box 2: A shared access signature (SAS) token.
For File storage you can only use SAS.
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10
by EleChie at Aug. 31, 2022, 8:23 a.m.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Submit Cancel
NaoVaz
Highly Voted 1 year, 2 months ago
1) A shared access signature (SAS) token 2) A shared access signature (SAS) token Blob Storage: Support both Azure Active Directory (AD) and Shared Access Signature (SAS) token. File Storage: Only Shared Access Signature (SAS) token is supported. Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10?toc=%2Fazure%2Fstorage%2Fblobs%2Ftoc.json#authorize-azcopy
upvoted 48 times
RougePotatoe
10 months, 1 week ago
So according to the resource you linked that is for authorization not authentication. The question currently explicitly asked for authentication. It seems Microsoft is using authorization too liberally. "You can provide authorization credentials by using Azure Active Directory (AD), or by using a Shared Access Signature (SAS) token."
upvoted 3 times
...
...
AzZnLuVaBoI
Highly Voted 8 months, 2 weeks ago
On the Exam 3/29/23.
upvoted 11 times
Romancc
8 months, 2 weeks ago
I hope you passed
upvoted 3 times
...
...
mtc9
Most Recent 2 months, 2 weeks ago
To storage1, you could authenticate with Access Key, SAS and AAD, but Storage1 has disabled public access, so you can't access it with AzCopy even authenticated. However in SAS toiken you can specify authorized IP range from which you can use your access. Access Key and AAD don;t have that option, hence the only possible authorization method for storage1 is SAS.
upvoted 2 times
...
Aniruddha_dravyakar
2 months, 2 weeks ago
Answer is SAS for both.. most secured way to copy files
upvoted 1 times
...
dargin
4 months, 1 week ago
1.SAS 2.SAS https://learn.microsoft.com/en-us/azure/storage/common/storage-ref-azcopy-copy Azure Blob (SAS or public) -> Azure Blob (SAS or OAuth authentication) Azure Blob (SAS or OAuth authentication) -> Azure Blob (SAS or OAuth authentication) - See Guidelines. Azure Blob (SAS or public) -> Azure Files (SAS) Azure Files (SAS) -> Azure Files (SAS) Azure Files (SAS) -> Azure Blob (SAS or OAuth authentication)
upvoted 3 times
...
Mehedi007
4 months, 1 week ago
1) SAS 2) SAS source -> destination Azure Files (SAS) -> Azure Files (SAS) https://learn.microsoft.com/en-au/azure/storage/common/storage-ref-azcopy-copy#synopsis https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10#authorize-azcopy
upvoted 1 times
Mehedi007
4 months, 1 week ago
Sorry! I copied the wrong one by mistake. The right one: Azure Blob (SAS or public) -> Azure Files (SAS) The correct answer is still: SAS & SAS
upvoted 1 times
...
...
itguyeu
5 months, 2 weeks ago
I used free version access for this site and it helped me pass the exam. Some questions that I had on the exams, I took the exam more than once, are not available under the free tier access, but 80% of the questions came from here. I do recommend investing a bit of money and getting full access to this site. I didn't memorise answers but analysed them and studied as Microsoft does tweak them a bit. This Q was on the exam.
upvoted 2 times
...
paridao
5 months, 3 weeks ago
Answer is wrong, the correct is: 1) A shared access signature (SAS) token, Oauth 2) A shared access signature (SAS) token See here: https://learn.microsoft.com/en-au/azure/storage/common/storage-ref-azcopy-copy in detail the line: local <-> Azure Blob (SAS or OAuth authentication) Remember that Oauth can use AD, see here: https://learn.microsoft.com/en-us/azure/storage/files/authorize-oauth-rest?tabs=portal "Azure Files OAuth over REST (preview) enables admin-level read and write access to Azure file shares for users and applications via the OAuth authentication protocol, using Azure Active Directory (Azure AD)..."
upvoted 2 times
Mehedi007
4 months, 1 week ago
You're referring to the wrong line. The correct line for (source -> destination) is: Azure Files (SAS) -> Azure Files (SAS). So the correct answer is SAS, & SAS.
upvoted 1 times
Mehedi007
4 months, 1 week ago
Sorry! I also copied the wrong one by mistake. The right one: Azure Blob (SAS or public) -> Azure Files (SAS) The correct answer is still: SAS & SAS
upvoted 1 times
...
...
...
Andreas_Czech
6 months, 1 week ago
Answer not correct. regarding MS is Blob accessed by AAD or SAS. SAS is uses for Field 2 and regarding the MS Article is OAuth used with Azure AD https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-access-azure-active-directory Correct must be: Field 1: OAuth Field 2: shared access signature (SAS) token
upvoted 2 times
...
Spam101198
9 months, 1 week ago
Blob Storage: Support Azure Active Directory (AD) and Shared Access Signature (SAS) token. File Storage: Only Shared Access Signature (SAS) token is supported.
upvoted 4 times
...
vbohr899
9 months, 2 weeks ago
Cleared Exam today 26 Feb, This question was there in exam.
upvoted 9 times
...
zellck
10 months, 1 week ago
1. SAS token 2. SAS token https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10#option-2-use-a-sas-token Option 2: Use a SAS token - You can append a SAS token to each source or destination URL that use in your AzCopy commands.
upvoted 5 times
...
XristophD
11 months, 4 weeks ago
I thing it is SAS token (only) for both, looking at the following documentation: https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview#when-to-use-a-shared-access-signature "Additionally, a SAS is required to authorize access to the source object in a copy operation in certain scenarios: ... When you copy a blob to a file, or a file to a blob. You must use a SAS even if the source and destination objects reside within the same storage account." 1) could be SAS and AD, but stated under above link SAS needs to be provided for source when copying to a FileShare 2) definitely SAS token, since AD Auth is not supported by FileShare
upvoted 3 times
...
meeko86
1 year ago
Answer provided correct. https://learn.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10 You can provide authorization credentials by using Azure Active Directory (AD), or by using a Shared Access Signature (SAS) token. Use this table as a guide: Storage type Currently supported method of authorization Blob storage Azure AD & SAS Blob storage (hierarchical namespace) Azure AD & SAS File storage SAS only
upvoted 1 times
...
matejka
1 year, 1 month ago
The answer is wrong. Simply because you can't drag the provided option to two different answer boxes. So OAuth (AD) for the blob storage and SAS for the file storage.
upvoted 1 times
OliwerCiecwierz
1 year, 1 month ago
"Each method may be used once, more than once, or not at all."
upvoted 5 times
...
...
LiamAzure
1 year, 1 month ago
Isn't OAuth = AD or am I wrong?
upvoted 4 times
dotnet_dev
2 months, 1 week ago
Yes, you are wrong. OAuth is a protocol while AD (now Entra Id) is a product with a wide range of capabilities (directory server, user authentication,...)
upvoted 1 times
...
...
klasbeatz
1 year, 2 months ago
I don't understand what authentication has to do with copying data???
upvoted 1 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel