AZ-104 Certification Practice Question #148

Question

You have an Azure subscription linked to a hybrid Microsoft Entra tenant. The tenant contains the users shown in the following table.

You create the Azure Files shares shown in the following table.

You configure identity-based access for contoso2024 as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Accepted Answer

1. **User1** has "On-premises sync enabled" set to **No**, meaning they are a cloud-only user. AD DS identity-based authentication for Azure Files does not support cloud-only users (solely based in Microsoft Entra ID) under this configuration. Thus, User1 cannot access `share1`.
2. **User2** has "On-premises sync enabled" set to **Yes**, which makes them a synced hybrid user. The `contoso2024` storage account has AD DS enabled and default share-level permissions configured for all authenticated users. Since User2 is a hybrid user and is authenticated, User2 can access `share2`.
3. **share3** is located on storage account `contoso2025`. The configuration exhibit only shows AD DS identity-based authentication configured for `contoso2024`, meaning `contoso2025` does not have identity-based authentication configured. Therefore, User2 cannot access `share3`.

More AZ-104 practice questions