MENU
You have a Windows Virtual Desktop host pool named Pool1 and an Azure Storage account named Storage1.
Storage1 stores FSLogix profile containers in a share folder named share1.
You create a new group named Group1. You provide Group1 with permission to sign in to Pool1.
You need to ensure that the members of Group1 can store the FSLogix profile containers in share1. The solution must use the principle of least privilege.
Which two privileges should you assign to Group1? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Suggested Answer: C, F
Get Premium AZ-140 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
https://docs.microsoft.com/en-us/azure/virtual-desktop/create-file-share
12 comments · newest first
SH
Shakira
11 months ago
I agree, the Storage File Data SMB Share Contributor role is a must!
GI
Gilbert
12 months ago
Wait, why would you need the Elevated Contributor role? Sounds excessive.
PE
Pearline
12 months ago
The List folder / read data NTFS permissions seem right.
VE
Veronika
1 year ago
I think the Modify NTFS permissions are overkill for this.
NO
Norah
1 year ago
Definitely need the Storage Blob Data Contributor role for sure.
PO
Portia
1 year ago
I'm a bit confused about the difference between the SMB Share Reader and Contributor roles. I think we need to give Group1 enough permissions without over-privileging them.
DA
Dana
1 year ago
I think we need to focus on NTFS permissions for share1, especially the List folder/read data permissions. That seems crucial for accessing the profile containers.
FA
Farrah
1 year ago
I remember something about the Storage Blob Data Contributor role being necessary for managing blobs, but I'm not sure if it's the right choice here.
HI
Hillary
1 year ago
I practiced a similar question where we had to assign roles for Azure storage. I feel like the SMB Share Contributor role might be a good fit for allowing write access.
SH
Shaniqua
1 year ago
Hmm, this seems like it could be about disabling or exempting something from the security system's response to an exploit event. I'll need to carefully consider the options to determine the best answer.
ME
Mel
1 year ago
I'm feeling good about this one. The TOGAF Supporting category is the catch-all for anything not included in the other defined categories, so that's my pick.
LO
Louvenia
1 year ago
Remember - they want THREE answers. Don't just guess quickly. Read carefully and think through each option's connection to the Patriot Act's goals.