AZ-104 Question 96
Select 3You plan to create an Azure file share in your general-purpose v2 storage account so that on-premises users can authenticate using their AD DS domain credentials. Which actions must you undertake to ensure domain-based authentication for your file share?
- A
Create an SMB file share in the Azure storage account, ensuring the share name adheres to standard naming conventions.
- B
Configure Azure Files AD DS authentication by providing your on-premises domain details and a domain account with sufficient privileges in the storage account settings.
- C
Create a private endpoint for the storage account to restrict connectivity to the file share from Azure virtual networks only.
- D
Enable the Large File Share feature to automatically configure AD DS domain-based authentication.
- E
Mount the file share using SMB protocol on on-premises machines with the domain credentials once the storage account is domain-joined.
Show answer and explanation
Correct answers: A, B, E
Explanation
To make an Azure file share accessible with on-premises domain credentials, you must configure Azure Files AD DS authentication in your storage account settings, create an SMB file share, and then mount it using domain credentials. Private endpoints and Large File Share features may be useful in certain scenarios but are not strictly required for domain-based authentication.
- A. Correct.
You need to create an SMB file share as a fundamental step for Azure Files. The share name must follow Azure naming conventions but does not need to match your domain name.
- B. Correct.
For on-premises AD DS domain authentication, you must configure Azure Files AD DS authentication by providing your domain details and an account that can join the storage account to the domain.
- C. Incorrect.
Although private endpoints can enhance security by restricting access, they are not mandatory for enabling domain-based authentication.
- D. Incorrect.
Enabling Large File Share allows for larger capacity but does not automatically configure or enable AD DS authentication.
- E. Correct.
After you have properly configured the storage account with domain information, mounting the Azure file share via SMB with domain credentials is necessary to complete the access scenario.