You need to allow a virtual machine in a virtual network to access an Azure Storage account without exposing the storage account to the public internet. Which configuration should you use?

Assign the VM a public IP address and add it to the storage account firewall.

Add a virtual network rule to the storage account firewall.

Enable the 'Allow trusted Microsoft services' exception.

Create a private endpoint for the storage account.

You need to rotate the access keys for an Azure Storage account. What is the recommended practice to avoid downtime for applications that use the primary key?

Disable the primary key and then re-enable it after a few minutes.

Update the applications to use the secondary key, then regenerate the primary key.

Regenerate the primary key and immediately update all applications.

Create a new storage account and migrate the data.

Your company has a storage account with a container that stores monthly reports. You need to provide a SAS token to a business partner that allows read access to the container for 7 days. You also need to be able to revoke the SAS token if the partnership ends early. What should you do?

Generate an account SAS with read permission and a 7-day expiry.

Generate a service SAS with read permission and a 7-day expiry directly on the container.

Create a stored access policy on the container with read permission and a 7-day expiry, then generate a SAS token that references the policy.

Generate a user delegation SAS with read permission and a 7-day expiry.

Which of the following is a required component of a service SAS token?

A stored access policy identifier

You need to generate a SAS token that grants access to a specific blob for one hour. Which tool can you use to create this SAS token?

Azure Active Directory admin center

Microsoft Certified:Azure Administrator Associate

Domain 2Objective 1

Configure Access to Storage AZ-104 Practice Questions (Page 4)

Part of the Implement and manage storage domain, which accounts for 15–20% of the AZ-104 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

7concepts

15–20%of the exam

Questions 16–20

16foundation · easy
You need to allow a virtual machine in a virtual network to access an Azure Storage account without exposing the storage account to the public internet. Which configuration should you use?
Select an answer first
17foundation · easy
You need to rotate the access keys for an Azure Storage account. What is the recommended practice to avoid downtime for applications that use the primary key?
Select an answer first
18application · medium
Your company has a storage account with a container that stores monthly reports. You need to provide a SAS token to a business partner that allows read access to the container for 7 days. You also need to be able to revoke the SAS token if the partnership ends early. What should you do?
Select an answer first
19foundation · easy
Which of the following is a required component of a service SAS token?
Select an answer first
20foundation · easy
You need to generate a SAS token that grants access to a specific blob for one hour. Which tool can you use to create this SAS token?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to AZ-104

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-104” is a trademark of its owner, used for identification only.