SC-300 Certification Practice Question #121

Question

You have an Azure subscription named Sub1 that contains three users named User1, User2, and User3. Sub1 has a storage account named storage1 that contains the resources shown in the following table.

Sub1 contains the users shown in the following table.

Which users can read File1, and which users can read File2? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

Reading the rendered tables, File1 lives in a blob container and File2 in an Azure file share. User1's Reader role is control-plane only and grants no data read, eliminating it from both boxes. User2's Storage Blob Data Reader grants the blob data-read action, so it reads File1 but its scope is blob-only and gives no file-share data action, so it cannot read File2. User3's Storage Contributor is a management role with no DataActions, but MS Learn explicitly notes these management roles (excluding Reader) can retrieve the account keys, which provide full access to all data — blobs and file shares alike — so User3 reads both File1 and File2. That yields File1 = User2 + User3 and File2 = User3 only. Confidence is held at 84 because the file shows no Suggested/Most-Voted marker and the community is split, but the top-voted comment plus MS Learn role definitions align cleanly on this selection.

More SC-300 practice questions