Question
Your company is moving a big data solution to Azure.
The company plans to use the following storage workloads:
- Azure Storage blob containers
- Azure Data Lake Storage Gen2
- Azure Storage file shares
- Azure Disk Storage
Which two storage workloads support authentication by using Azure Active Directory (Azure AD)? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
- A. Azure Storage file shares
- B. Azure Disk Storage
- C. Azure Storage blob containers Correct
- D. Azure Data Lake Storage Gen2 Correct
Explanation
Azure Storage blob containers support Azure AD (Microsoft Entra ID) authorization natively: security principals and managed identities get OAuth tokens and are authorized with Azure RBAC roles such as Storage Blob Data Reader. Azure Data Lake Storage Gen2 is built on Blob Storage and supports the same Azure AD authorization, with POSIX-style ACLs on top. Azure Storage file shares are accessed mainly over SMB, where identity-based access depends on AD DS, Microsoft Entra Domain Services or Microsoft Entra Kerberos rather than direct Azure AD authorization. Azure Disk Storage is attached to virtual machines and is not accessed through Azure AD-authorized data requests.
