Exam SC-500 Topic 1 Question 64 Discussion
Actual exam question for Microsoft's SC-500 exam
Question #: 64
Topic #: 1
Question #: 64
Topic #: 1
For which storage accounts can you implement the planned changes for storage?
Suggested Answer: D Vote an answer
The planned change is to enable Microsoft Entra Kerberos authentication for all supported storage .
Microsoft Entra Kerberos authentication is supported for Azure Files SMB shares , so only storage account types that support Azure Files qualify. Microsoft documents Microsoft Entra Kerberos as an identity-based authentication method specifically for Azure file shares over SMB.
From the case:
* storage1 - Standard, general-purpose storage: supported. Standard general-purpose v2 accounts support Azure Files in addition to blobs, queues, and tables.
* storage2 - Premium Block blobs: not supported because this account type supports Blob Storage, not Azure Files.
* storage3 - Premium File shares: supported because this account type is specifically designed for Azure Files.
* storage4 - Premium Page blobs: not supported because this account type supports page blobs only.
Therefore, Microsoft Entra Kerberos can be enabled for storage1 and storage3 only .
The account ' s Azure region does not change this determination. The decisive factor is whether the storage account supports Azure Files SMB , because Microsoft Entra Kerberos authentication is configured through the Azure Files identity-based access settings.
Microsoft Entra Kerberos authentication is supported for Azure Files SMB shares , so only storage account types that support Azure Files qualify. Microsoft documents Microsoft Entra Kerberos as an identity-based authentication method specifically for Azure file shares over SMB.
From the case:
* storage1 - Standard, general-purpose storage: supported. Standard general-purpose v2 accounts support Azure Files in addition to blobs, queues, and tables.
* storage2 - Premium Block blobs: not supported because this account type supports Blob Storage, not Azure Files.
* storage3 - Premium File shares: supported because this account type is specifically designed for Azure Files.
* storage4 - Premium Page blobs: not supported because this account type supports page blobs only.
Therefore, Microsoft Entra Kerberos can be enabled for storage1 and storage3 only .
The account ' s Azure region does not change this determination. The decisive factor is whether the storage account supports Azure Files SMB , because Microsoft Entra Kerberos authentication is configured through the Azure Files identity-based access settings.
by Murphy at Oct 05, 2026, 08:07 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).