Az-104 Implement and manage Azure storage

Your company has a Microsoft Azure subscription.
The company has datacenters in Los Angeles and New York.
You are configuring the two datacenters as geo-clustered sites for site resiliency.
You need to recommend an Azure storage redundancy option.

You have the following data storage requirements:
✑ Data must be stored on multiple nodes.
✑ Data must be stored on nodes in separate geographic locations.
✑ Data can be read from the secondary location as well as from the primary location.

Which of the following Azure stored redundancy options should you recommend?

• Geo-redundant storage

• Zone-redundant storage

• Locally redundant storage

• None

You have an Azure Subscription that contains a storage account named storageacct1234 and two users named User1 and User2.
You assign User1 the roles shown in the image.

Which two actions can User1 perform?

• Assign roles to User2 for storageacct1234.

• Upload blob data to storageacct1234.

• Modify the firewall of storageacct1234.

• View file shares in storageacct1234.

• View blob data in storageacct1234.

You have an Azure subscription named Sub1 that contains two users named User1 and User2.

You need to assign role-based access control (RBAC) roles to User1 and User2. The users must be able to perform the following tasks in Sub1:

• User1 must view the data in any storage account.
• User2 must assign users the Contributor role for storage accounts.

The solution must use the principle of least privilege.

Which RBAC role should you assign to user1?

• Contributor

• Storage Blob Contributor

• Storage Account Contributor

• Reader and Data Access

• None

You have an Azure subscription named Sub1 that contains two users named User1 and User2.

You need to assign role-based access control (RBAC) roles to User1 and User2. The users must be able to perform the following tasks in Sub1:

• User1 must view the data in any storage account.
• User2 must assign users the Contributor role for storage accounts.

The solution must use the principle of least privilege.

Which RBAC role should you assign to user2?

• Contributor

• Storage Account Contributor

• Owner

• User Access Administrator

You have an Azure subscription that contains the resources shown in the following table.

You need to assign User1 the Storage File Data SMB Share Contributor role for share1.

What should you do first?

• Enable identity-based data access for the file shares in storage1

• Modify the security profile for the file shares in storage1

• Select Default to Azure Active Directory authorization in the Azure portal for storage1

• Configure Access control (IAM) for share1

You have an Azure subscription that contains the resources shown in the following table.

You need to assign Workspace1 a role to allow read, write, and delete operations for the data stored in the containers of storage1.

Which role should you assign?

• Storage Account Contributor

• Contributor

• Storage Blob Data Contributor

• Reader and Data Access

You have an Azure subscription named Sub1 that contains the blob containers shown in the table.

Sub1 contains two users named User1 and User2. Both users are assigned the Reader role at the Sub1 scope.

You have a condition named Condition1 as shown in the following exhibit 1.

You have a condition named Condition2 as shown in the following exhibit 2.

You assign roles to User1 and User2 as shown in the following

User : User1 -- Role : Storage Blob Data Reader -- Scope : Sub1 -- 'Role assignment Condition' : Condition1

User : User2 -- Role : Storage Blob Data Owner -- Scope : storage1 -- 'Role assignment Condition' : Condition2

Select Yes if the below statement is true. Otherwise, select No.

User1 can read blob2

• Yes

• No

You have an Azure subscription named Sub1 that contains the blob containers shown in the table.

Sub1 contains two users named User1 and User2. Both users are assigned the Reader role at the Sub1 scope.

You have a condition named Condition1 as shown in the following exhibit 1.

You have a condition named Condition2 as shown in the following exhibit 2.

You assign roles to User1 and User2 as shown in the following

User : User1 -- Role : Storage Blob Data Reader -- Scope : Sub1 -- 'Role assignment Condition' : Condition1

User : User2 -- Role : Storage Blob Data Owner -- Scope : storage1 -- 'Role assignment Condition' : Condition2

Select Yes if the below statement is true. Otherwise, select No.

User1 can read blob3

• Yes

• No

You have an Azure subscription named Sub1 that contains the blob containers shown in the table.

Sub1 contains two users named User1 and User2. Both users are assigned the Reader role at the Sub1 scope.

You have a condition named Condition1 as shown in the following exhibit 1.

You have a condition named Condition2 as shown in the following exhibit 2.

You assign roles to User1 and User2 as shown in the following

User : User1 -- Role : Storage Blob Data Reader -- Scope : Sub1 -- 'Role assignment Condition' : Condition1

User : User2 -- Role : Storage Blob Data Owner -- Scope : storage1 -- 'Role assignment Condition' : Condition2

Select Yes if the below statement is true. Otherwise, select No.

User2 can read blob1

• Yes

• No

You have an Azure subscription named Subscription1 that contains the storage accounts shown in the table:

You plan to use the Azure Import/Export service to export data from Subscription1.
You need to identify which storage account can be used to export the data.
What should you identify?

• storage1

• storage2

• storage3

• storage4