A user signs in successfully to Entra ID but is denied access to a traditional AD-authorized on-premises file share. Which aspect should be reviewed?

Choose the single best answer.

A.Repeat the successful Entra sign-in and assume authentication automatically adds the required AD group membership.
B.Deploy application proxy and assume it provides general SMB authorization for the share.
C.Grant subscription Owner and assume that role overrides the on-premises share's ACLs.
D.Review AD authentication, group/ACL authorization, DNS, and domain-controller connectivity.

Show the answer and explanation

✓ Correct answer

Review AD authentication, group/ACL authorization, DNS, and domain-controller connectivity.

Traditional file-share access requires the supported AD authentication and group/ACL authorization path along with connectivity and DNS. Subscription roles do not override share ACLs, and successful sign-in does not automatically add access groups. Application proxy publishes supported web apps rather than supplying general SMB authorization. Source: AZ-305 Study Guide.pdf, PDF page(s) 16.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.