Microsoft AZ-104 Practice Test 64
Question 630
The file endpoint resolves privately but a client still cannot connect on SMB port 445. What should be tested?
- Create and approve a separate file-subresource private endpoint and its DNS mapping.
- Check TCP port 445 reachability and intervening firewall or ISP rules.
- Associate the service SAS with a stored access policy on the relevant container.
- Reassign a blob data role instead of testing whether TCP 445 can traverse the client's route and firewalls.
Explanation
Correct Answer
B:Correct DNS and private endpoint state do not guarantee SMB connectivity. Network filtering of TCP 445 can block mounting. This matters here because the file endpoint resolves privately but a client still cannot connect on SMB port 445.
Incorrect Answers
A:Private endpoints target storage subresources such as blob or file independently. A blob endpoint does not privately expose the file service. This matters here because the file endpoint resolves privately but a client still cannot connect on SMB port 445.
C:Stored access policies can control supported service SAS permissions and timing and can be modified or removed to revoke linked SAS authorization. This matters here because the file endpoint resolves privately but a client still cannot connect on SMB port 445.
D:SMB file access requires successful TCP port 445 transport in addition to identity and share permissions. Private DNS resolution alone does not prove that network devices or service-provider policies permit the port.
Question 631
An organization has severe workload latency with small block blobs and needs predictable high transaction rates. Which account tier is designed for that?
- Evaluate premium BlockBlobStorage for supported low-latency block-blob workloads.
- Use read-access geo-redundant storage if secondary read access before failover is required.
- Review inventory policy filters, rule scope, and supported blob types or versions.
- Verify whether the chosen account kind supports all required storage services and choose StorageV2 if needed.
Explanation
Correct Answer
A:Premium block blob accounts target low-latency and high-transaction object operations. They have different supported account features and cost profiles.
Incorrect Answers
B:RA-GRS adds a secondary read endpoint, unlike ordinary GRS. Remote copy existence alone does not mean the secondary can answer routine reads. This matters here because an organization has severe workload latency with small block blobs and needs predictable high transaction rates.….
C:Inventory output follows the configured inclusion rules. Filters or version flags may exclude otherwise existing objects. This matters here because an organization has severe workload latency with small block blobs and needs predictable high transaction rates.….
D:Storage account kind determines supported services. A specialized BlockBlobStorage account does not simply provide the full general-purpose service set. This matters here because an organization has severe workload latency with small block blobs and needs predictable high transaction rates.….
Question 632
A team selects premium storage but discovers it cannot use all standard Blob access tiers. What should be reviewed?
- Verify whether the chosen account kind supports all required storage services and choose StorageV2 if needed.
- LRS is a local redundancy model and does not provide independent zone replication.
- Check supported access-tier and redundancy combinations for the chosen account kind.
- Switch a premium account to GZRS to unlock all Standard Blob hot, cool, cold and archive tiers without checking account-kind limits.
Explanation
Correct Answer
C:Premium and standard storage account types expose different performance and tier options. A tier assumption from StorageV2 may not apply. This matters here because a team selects premium storage but discovers it cannot use all standard Blob access tiers.
Incorrect Answers
A:Storage account kind determines supported services. A specialized BlockBlobStorage account does not simply provide the full general-purpose service set. This matters here because a team selects premium storage but discovers it cannot use all standard Blob access tiers.
B:A local datacenter disaster may affect all LRS replicas. ZRS or other models are needed when broader failure-domain protection is required. This matters here because a team selects premium storage but discovers it cannot use all standard Blob access tiers.
D:Access tiers depend on the account kind, region and replication support. Premium BlockBlobStorage does not become a general-purpose v2 account merely by changing redundancy.
Question 633
A storage account name is rejected even though no same-named account exists in the subscription. Why?
- Configure Blob object replication and assume it reserves a storage account name globally.
- Recognize that storage account names are globally unique within the Azure Storage namespace.
- Use AzCopy with appropriate source and destination authorization.
- Compare account type, feature constraints and region support for ZRS eligibility.
Explanation
Correct Answer
B:Public Azure Storage service endpoints use the account name in a global namespace. A different subscription cannot reuse an existing name. This matters here because a storage account name is rejected even though no same-named account exists in the subscription. Why.
Incorrect Answers
A:Object replication only links already valid storage accounts and cannot allocate a globally unique account name. Azure Storage account names must be unique across its public namespace, including accounts outside the user's subscription.
C:AzCopy is optimized for high-volume Azure Storage data transfers. A browser-based portal upload is less suitable at this scale. This matters here because a storage account name is rejected even though no same-named account exists in the subscription. Why.
D:Service availability and account configuration control redundancy choices. Subscription membership by itself does not guarantee identical options. This matters here because a storage account name is rejected even though no same-named account exists in the subscription. Why.
Question 634
A deployment script constructs an account name with uppercase letters and punctuation. What must change?
- Evaluate premium BlockBlobStorage for supported low-latency block-blob workloads.
- Use an available lowercase alphanumeric name that meets Azure Storage account naming rules.
- Declare the security properties in the ARM or Bicep storage account deployment definition.
- Inspect allowBlobPublicAccess and any effective Azure Policy governing the storage account.
Explanation
Correct Answer
B:Storage account naming imposes character, length and global uniqueness constraints. A valid resource-group name does not imply a legitimate account name.
Incorrect Answers
A:Premium block blob accounts target low-latency and high-transaction object operations. They have different supported account features and cost profiles. This matters here because a deployment script constructs an account name with uppercase letters and punctuation.
C:Infrastructure-as-code can enforce secure defaults before application data arrives. Manually changing settings later creates exposure windows. This matters here because a deployment script constructs an account name with uppercase letters and punctuation.
D:Public blob access is controlled by account-level and container-level settings. A successful deployment alone does not mean the requested secure defaults were applied. This matters here because a deployment script constructs an account name with uppercase letters and punctuation.
Question 635
A company needs an inventory of blobs and metadata every weekend for auditing. Which storage feature supplies scheduled reports?
- Replicate blobs to another account and treat the object copies as an audit inventory report.
- Enable Blob Storage inventory policies for the selected scope and output format.
- Review the selected connection identity and storage Blob Data permission at the data scope.
- Verify whether the chosen account kind supports all required storage services and choose StorageV2 if needed.
Explanation
Correct Answer
B:Blob inventory can enumerate supported blob and container metadata into scheduled output. Manually opening each container cannot scale. This matters here because a company needs an inventory of blobs and metadata every weekend for auditing. Which storage feature supplies….
Incorrect Answers
A:Object replication produces copied objects, not a dated list of names, sizes, and metadata for auditing. Use Azure Blob inventory policies with the supported schedule, destination and report format to produce the requested inventory.
C:ARM resource visibility and blob content authorization can differ. An authenticated GUI still needs the correct data access. This matters here because a company needs an inventory of blobs and metadata every weekend for auditing. Which storage feature supplies….
D:Storage account kind determines supported services. A specialized BlockBlobStorage account does not simply provide the full general-purpose service set. This matters here because a company needs an inventory of blobs and metadata every weekend for auditing. Which storage feature supplies….
Question 636
The inventory report omits some expected blobs despite a successful run. Which setting matters?
- Evaluate premium BlockBlobStorage for supported low-latency block-blob workloads.
- Change redundancy to ZRS without checking whether inventory rules include the relevant containers, prefixes and blob states.
- Review inventory policy filters, rule scope, and supported blob types or versions.
- Verify blob change feed and versioning prerequisites and source/destination policy mappings.
Explanation
Correct Answer
C:Inventory output follows the configured inclusion rules. Filters or version flags may exclude otherwise existing objects. This matters here because the inventory report omits some expected blobs despite a successful run. Which setting matters.
Incorrect Answers
A:Premium block blob accounts target low-latency and high-transaction object operations. They have different supported account features and cost profiles. This matters here because the inventory report omits some expected blobs despite a successful run. Which setting matters.
B:Blob inventory scope and rule filters determine which blobs appear in the exported report; redundancy choice does not populate excluded prefixes or blob versions.
D:Object replication requires supported account settings and correctly linked source and destination policies. A destination URL alone is insufficient. This matters here because the inventory report omits some expected blobs despite a successful run. Which setting matters.
Question 637
A video ingestion service writes fixed-size log fragments at the end of a growing object. Which blob type is optimized for that?
- Use an append blob for supported append-only record operations.
- Enable Blob Storage versioning for supported blob types and operations.
- Use an online cool or cold Blob Storage access tier appropriate to access frequency.
- Use a page blob with supported aligned range operations.
Explanation
Correct Answer
A:Append blobs allow appending blocks without replacing the whole object. Page blobs target range-based reads and writes. This matters here because a video ingestion service writes fixed-size log fragments at the end of a growing object. Which blob type is….
Incorrect Answers
B:Versioning keeps earlier committed versions when supported changes occur. It serves different recovery needs from simple soft delete. This matters here because a video ingestion service writes fixed-size log fragments at the end of a growing object. Which blob type is….
C:Cool and cold tiers allow online retrieval with different storage, transaction, and minimum retention pricing. Archive is offline. This matters here because a video ingestion service writes fixed-size log fragments at the end of a growing object. Which blob type is….
D:Page blobs expose range-based operations and are suited to certain virtual-disk-like workloads. Block blobs emphasize staged object uploads. This matters here because a video ingestion service writes fixed-size log fragments at the end of a growing object. Which blob type is….
Question 638
A logging client tries to overwrite the middle of an append blob and receives an unsupported operation. What design is correct?
- Inspect the signed credential's blob write permission and current storage locks or policies.
- Treat the object as append-only or use a different blob type for arbitrary overwrites.
- Initiate blob rehydration to a supported online tier and await completion.
- Verify SMB TCP port 445 connectivity along the client network path.
Explanation
Correct Answer
B:Append blob semantics permit adding data at the end rather than arbitrary middle writes. The access pattern determines blob type.
Incorrect Answers
A:Interactive tools still obey data-plane access and resource constraints. A working list operation does not prove permission to write blob contents. This matters here because a logging client tries to overwrite the middle of an append blob and receives an unsupported operation. What design….
C:Archived blobs are not directly readable. Rehydration moves the object to an accessible tier and may take hours depending on priority. This matters here because a logging client tries to overwrite the middle of an append blob and receives an unsupported operation. What design….
D:SMB traffic depends on TCP 445 reachability unless supported alternate network connectivity is used. Share permission changes cannot correct a network port block. This matters here because a logging client tries to overwrite the middle of an append blob and receives an unsupported operation. What design….
Question 639
A virtual disk application must update random aligned byte ranges rather than append entire objects. Which Azure blob type matches?
- Use Azure Data Lake Storage Gen2 hierarchical namespace in a compatible account.
- Use an append blob for supported append-only record operations.
- Use a page blob with supported aligned range operations.
- Use Blob REST or supported client tools for blob objects rather than native Azure Files SMB paths.
Explanation
Correct Answer
C:Page blobs expose range-based operations and are suited to certain virtual-disk-like workloads. Block blobs emphasize staged object uploads. This matters here because a virtual disk application must update random aligned byte ranges rather than append entire objects. Which Azure….
Incorrect Answers
A:Hierarchical namespace supports directories and ACLs for data-lake workloads, with Blob API integration. Design must check feature compatibility. This matters here because a virtual disk application must update random aligned byte ranges rather than append entire objects. Which Azure….
B:Append blobs allow appending blocks without replacing the whole object. Page blobs target range-based reads and writes. This matters here because a virtual disk application must update random aligned byte ranges rather than append entire objects. Which Azure….
D:Blob Storage is object-oriented; an SMB file share requires the Azure Files service or another compatible gateway. This matters here because a virtual disk application must update random aligned byte ranges rather than append entire objects. Which Azure….
Question 640
A developer attempts a nonaligned page-blob write and receives an alignment error. What constraint should be reviewed?
- Use an online cool or cold Blob Storage access tier appropriate to access frequency.
- Use valid page-aligned offsets and lengths for page blob writes.
- Use an append blob for supported append-only record operations.
- Inspect the signed credential's blob write permission and current storage locks or policies.
Explanation
Correct Answer
B:Page blobs impose alignment rules on range updates. An arbitrary byte offset is not a valid page-write boundary.
Incorrect Answers
A:Cool and cold tiers allow online retrieval with different storage, transaction, and minimum retention pricing. Archive is offline. This matters here because a developer attempts a nonaligned page-blob write and receives an alignment error. What constraint should be reviewed.
C:Append blobs allow appending blocks without replacing the whole object. Page blobs target range-based reads and writes. This matters here because a developer attempts a nonaligned page-blob write and receives an alignment error. What constraint should be reviewed.
D:Interactive tools still obey data-plane access and resource constraints. A working list operation does not prove permission to write blob contents. This matters here because a developer attempts a nonaligned page-blob write and receives an alignment error. What constraint should be reviewed.