AZ-204 Develop for Azure storage Practice Question
You are developing a solution that requires multiple Azure virtual machines to access the same set of files concurrently. The files are updated frequently and must be accessible with low latency. You need to choose a shared storage solution that integrates with Microsoft Entra ID (Microsoft Entra ID) for authentication. Which Azure storage solution should you use?
⚠ Common exam trap
Watch out — candidates often confuse Azure NetApp Files (which supports SMB/NFS but not native Entra ID auth) with Azure Files (which does support Entra ID auth), or they mistakenly think Blob Storage can serve as a file share with low-latency concurrent access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Files shares.
Azure Files shares provide fully managed SMB and NFS file shares that can be accessed concurrently by multiple Azure VMs with low latency. They support identity-based authentication using Microsoft Entra ID (formerly Azure AD) over SMB, enabling granular access control via RBAC and NTFS ACLs. This makes Azure Files the correct choice for a shared, frequently updated file store requiring Entra ID integration.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Blob Storage with a private container.
Why it's wrong here
Azure Blob Storage is designed as object storage for unstructured data, not a hierarchical file system. It lacks native support for standard file-sharing protocols like Server Message Block (SMB) or Network File System (NFS), which are essential for concurrent access and file locking required by multiple virtual machines. Therefore, it cannot provide the necessary file system semantics or direct shared access for VMs, making it unsuitable for scenarios requiring shared file access.
- ✗
Azure NetApp Files.
Why it's wrong here
Azure NetApp Files is tempting due to its exceptional performance, low latency, and support for concurrent access, making it suitable for demanding enterprise workloads like SAP HANA or high-performance computing. However, it fails this scenario because its authentication relies on Active Directory Domain Services or Microsoft Entra Domain Services, which are synchronised with Microsoft Entra ID, rather than offering the direct, native Microsoft Entra ID authentication for file shares that the question implies.
- ✓
Azure Files shares.
Why this is correct
Azure Files shares provide fully managed cloud file shares that support industry-standard SMB and NFS protocols, enabling multiple Azure Virtual Machines to access the same files concurrently. This service integrates directly with Microsoft Entra ID for authentication and authorization, allowing for granular access control based on user identities. Its native file system capabilities, including file locking and consistent access, make it the ideal solution for shared file storage requirements across multiple VMs.
- ✗
Azure Disk Storage with shared disks.
Why it's wrong here
Azure shared disks allow attaching a managed disk to multiple VMs, but they are typically used for clustered applications (e.g., SQL Server FCI) and require cluster-aware file systems. They are not designed for general file sharing and do not integrate with Microsoft Entra ID directly for authentication.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
This AZ-204 question is part of Courseiva's 881-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-204 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-204 exam.