AZ-104 Question 91
Single answerAn organization with a hybrid environment wants to provide users with a shared folder that can be accessed from both on-premises and Azure-hosted virtual machines. They also require seamless integration with the existing on-premises Active Directory for authentication and permissions management. Which approach should you implement to meet these requirements?
- A
Use an Azure Blob container secured with SAS tokens
- B
Configure an Azure File share with Active Directory Domain Services (AD DS) authentication
- C
Transfer data using Azure Data Box and enable blob soft delete
- D
Create an NFS share on an Azure VM that is integrated with Azure AD Domain Services
Show answer and explanation
Correct answer: B
Explanation
Azure Files supports integration with on-premises Active Directory Domain Services, allowing you to manage permissions with on-prem AD identities while providing SMB-based access to both on-premises and Azure-based clients.
- A. Incorrect.
Storing data in a Blob container with SAS tokens does not provide native integration with on-premises Active Directory and SMB access.
- B. Correct.
Azure File shares can leverage on-premises AD DS for authentication, providing seamless access for hybrid environments via SMB protocol.
- C. Incorrect.
Azure Data Box is a solution for one-time large data migration and does not address the need for continuous AD DS-based authentication and access.
- D. Incorrect.
Creating and managing an NFS share on an Azure VM introduces extra complexity and does not directly support on-premises AD DS authentication for SMB-based file shares.