AZ-802 · Storage and file services · Storage and file services | Configure and manage Azure Files · Storage and file services | Configure and manage Windows Server file shares

Practice question 489 of 506 · medium

An AD DS-authenticated user connects to an Azure SMB share using ordinary identity-based roles. The user has Storage File Data SMB Share Contributor at the share, but the target folder ACL grants the user read access only. The user can read but cannot create a file. What is the appropriate correction?

Choose the single best answer.

A.Replace Contributor with SMB Share Reader and assume the folder ACL then becomes writable
B.Recreate the private endpoint because network reachability is the cause of the folder-specific write denial
C.Grant the required write permission through the folder/file ACL after confirming the existing share-level assignment
D.Change the inherited folder ACL only on an unrelated directory and assume it grants access to the target folder

Show the answer and explanation

✓ Correct answer

Grant the required write permission through the folder/file ACL after confirming the existing share-level assignment

Contributor already passes the share write gate; the target folder needs appropriate file-side write permission. Reader would further restrict access. The working read path is not evidence for recreating the private endpoint, and changes outside the target ACL/inheritance scope do not grant its write access.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material, independently written and not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product support and exam scope can change; a practice percentage is not a Microsoft exam scaled score.