Practice question 53 of 180 · medium
A storage administrator mounts a profile share with the account key successfully. A new user's Kerberos ticket and intended NTFS ACLs are correct, but the user has no SMB share role and no default share permission applies. What is missing?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- Appropriate share-level SMB data authorization for the user or group
Test the actual entitled user path. Grant the intended share data permission while retaining the correct ACLs; an account-key mount is not proof of user authorization. Option explanations: A. Azure management Contributor alone: Resource management access does not automatically grant ordinary SMB data access. B. A larger dynamically expanding VHDX: Container size does not grant missing share authorization. C. Appropriate share-level SMB data authorization for the user or group: Both share authorization and file ACLs must pass; the administrator's key bypasses the normal user test. D. Public inbound RDP on the storage endpoint: SMB authorization is not supplied by administrative RDP connectivity. Sources: Configure SMB Storage Permissions — https://learn.microsoft.com/en-us/fslogix/how-to-configure-storage-permissions; Overview of Azure Files identity-based authentication for SMB access — https://learn.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview
Read and review here, or open the app to practise and save your results on this device.
Unofficial study aid, not affiliated with or endorsed by Microsoft. Original educational practice questions, not official exam questions or a prediction of an exam result. Use Microsoft Learn and hands-on labs alongside this course.