AZ-104 Certification Practice Question #137

Question

You have an Azure subscription that contains an Azure Storage account named storageaccount1.
You export storageaccount1 as an Azure Resource Manager template. The template contains the following sections.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point
Hot Area:

Accepted Answer

1. **Public IP Access:** The exported ARM template shows `networkAcls` with `defaultAction` set to `Allow`. There are no custom `ipRules` or `virtualNetworkRules` specified. Hence, the storage firewall is set to allow all public traffic, meaning any server with a public IP can access it. Thus, **Yes**.
2. **Individual Blob Archive Tier:** The storage account `kind` is defined as `StorageV2` (General-Purpose v2) Standard. Standard GPv2 accounts fully support moving individual blobs to the Archive tier. Thus, **Yes**.
3. **Global Administrator File Share Access:** In Azure, directory administrator roles (like Global Administrator) are decoupled from Azure resource roles. Having the Global Admin directory role does not grant automatic data-plane access to storage file shares. To access file shares using Azure AD credentials, explicit RBAC roles (such as Storage File Data SMB Share Reader/Contributor) must be assigned. Thus, **No**.

More AZ-104 practice questions