MENU
You are configuring Azure Active Directory (Azure AD) authentication for an Azure Storage account named storage1.
You need to ensure that the members of a group named Group1 can upload files by using the Azure portal. The solution must use the principle of least privilege.
Which two roles should you configure for storage!? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point
Suggested Answer: A, B
Get Premium AZ-104 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
14 comments · newest first
LA
Lashawna
12 months ago
Agree, Storage Blob Data Contributor is a must!
EF
Effie
1 year ago
Surprised that Reader is even an option here!
PA
Paola
1 year ago
Storage Account Contributor seems excessive, though.
EN
Ena
1 year ago
I think Reader is too limited for this task.
BA
Barrett
1 year ago
Definitely need Storage Blob Data Contributor for uploads.
KA
Kasandra
1 year ago
I’m torn between Storage Blob Data Contributor and Storage Blob Data Reader. I know one allows uploads, but I can't recall if we need both for this scenario.
TA
Tawna
1 year ago
I feel like the Storage Account Contributor might be too much access for what we need. We should stick to the least privilege principle.
LY
Lynelle
1 year ago
I remember practicing a similar question, and I think the Reader role is too limited for uploads. We definitely need something that allows write access.
LO
Loreta
1 year ago
I think we need to give Group1 permissions to upload files, so maybe the Storage Blob Data Contributor role? But I'm not sure about the second role.
SE
Selene
1 year ago
I think I understand the key steps here. We need to update the EFS file system policy to allow Account B to access the file system, create a VPC peering connection between the two accounts, and update the Lambda execution roles to have the necessary permissions.
DE
Delbert
1 year ago
The key here is understanding the modern criminological perspective on white-collar crime. I think option A captures that best, but I'll double-check my notes to be sure.
NA
Nadine
1 year ago
Hmm, I'm a bit unsure about this one. There are a lot of options to consider, and I'm not sure which two are the most important. Maybe I'll start by thinking about the potential challenges the company might face.
TY
Ty
1 year ago
Resource dependency analysis seems like it might be relevant, but I'm not sure how it would directly justify the investment. I'd probably go with cost-benefit analysis.
JO
Jose
1 year ago
This one seems pretty straightforward. I think the key is to focus on which system from the list doesn't natively support syslog events.