Microsoft Exam AZ-140 Topic 11 Question 60 Discussion

Actual exam question for Microsoft's AZ-140 exam

Question #: 60
Topic #: 11

Your network contains an on-premises Active Directory domain named contoso.com.

You have an Azure subscription that contains the resources shown in the following table.

You need to create a share that will host FSLogix profiles for AVDPool1. The solution must meet the following requirements:

* Maximize read and write performance for the profiles.

* Control access to the SMB share by using the users and groups stored in contoso.com.

Which account should you use to host the share?

AAccount1

BAccount2

CAccount3

Show Suggested Answer

Suggested Answer: A

https://learn.microsoft.com/en-us/azure/storage/files/storage-files-netapp-comparison

by Tammara at Nov 25, 2023, 02:49 PM

Limited Time Offer

25%

Off

Get Premium AZ-140 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Eileen

8 months ago

What about Account3? It's a service principal with the 'Storage Blob Data Contributor' role, so it should be able to access the storage account. And since it's a service principal, it could potentially be integrated with the contoso.com domain to control the access.

upvoted 0 times

...

Hyun

8 months ago

Yeah, and Account2 is a user account that's part of the contoso.com domain, so that might be a better option for controlling the access using the AD users and groups. The only question is whether it has the necessary permissions to access the storage account.

upvoted 0 times

...

Linwood

8 months ago

Okay, let's take a look at the options. Account1 seems like it could be a good choice since it's a managed identity with the 'Storage Blob Data Contributor' role, which would allow it to access the storage account. But I'm not sure if it can control the access through the Active Directory.

upvoted 0 times

...

8 months ago

A) Account1 is the correct account to use to host the share.

upvoted 0 times

...