SC-100 Certification Practice Question #2

Question

Your company is moving a big data solution to Azure.
The company plans to use the following storage workloads:
✑ Azure Storage blob containers
✑ Azure Data Lake Storage Gen2

Azure Storage file shares -

✑ Azure Disk Storage
Which two storage workloads support authentication by using Azure Active Directory (Azure AD)? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

Accepted Answer

MS Learn's "Authorize access to data in Azure Storage" lists Microsoft Entra ID as a directly supported and recommended authorization option for Blobs, and ADLS Gen2 (built on Blob) inherits the same Entra ID + Azure RBAC + ACL model. For Azure Files, the same doc qualifies support as "identity-based authorization over SMB through Microsoft Entra Domain Services" or on-prem AD DS — i.e., not plain Entra ID — which is exactly why the "AD" voters are mistaken. Azure Disk Storage has no Entra ID data-plane authentication. The community Most Voted (CD, 29) and MS Learn agree; the lone Suggested Answer "D" is a truncated single letter for a two-answer question, so it can't be the full key. Confidence is set at 84 (strong agreement, but with a real AD/CD community split and a deprecated-question caveat several commenters raised for 2025 Entra Kerberos changes).

More SC-100 practice questions