Exam SC-500 Topic 1 Question 64 Discussion

Actual exam question for Microsoft's SC-500 exam
Question #: 64
Topic #: 1
For which storage accounts can you implement the planned changes for storage?

Suggested Answer: D Vote an answer

The planned change is to enable Microsoft Entra Kerberos authentication for all supported storage .
Microsoft Entra Kerberos authentication is supported for Azure Files SMB shares , so only storage account types that support Azure Files qualify. Microsoft documents Microsoft Entra Kerberos as an identity-based authentication method specifically for Azure file shares over SMB.
From the case:
* storage1 - Standard, general-purpose storage: supported. Standard general-purpose v2 accounts support Azure Files in addition to blobs, queues, and tables.
* storage2 - Premium Block blobs: not supported because this account type supports Blob Storage, not Azure Files.
* storage3 - Premium File shares: supported because this account type is specifically designed for Azure Files.
* storage4 - Premium Page blobs: not supported because this account type supports page blobs only.
Therefore, Microsoft Entra Kerberos can be enabled for storage1 and storage3 only .
The account ' s Azure region does not change this determination. The decisive factor is whether the storage account supports Azure Files SMB , because Microsoft Entra Kerberos authentication is configured through the Azure Files identity-based access settings.

by Murphy at Oct 05, 2026, 08:07 AM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10