AZ-802 Manage Storage and File Services Practice Question
An organization uses Azure Files to store sensitive company data. They need to ensure that users can only access the files if they are authenticated via their on-premises Active Directory Domain Services (AD DS). Which technology should be implemented to support this?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AD DS Authentication for Azure Files
Azure Files supports several authentication methods for accessing file shares. For organizations with an existing on-premises footprint, integrating Azure Files with AD DS allows for a seamless user experience using standard Kerberos authentication. This allows the use of existing NTFS permissions (ACLs) to control access to files and folders within the cloud-hosted share.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Shared Access Signatures (SAS)
Why it's wrong here
Shared Access Signatures provide a way to grant limited access to resources in a storage account without sharing the account keys. While useful for application access and temporary sharing, they do not integrate with Active Directory identities or support the granular NTFS permissions required for a standard corporate file share environment for end users.
- ✗
Azure AD DS Authentication
Why it's wrong here
Azure AD Domain Services (AAD DS) is a managed domain service that is different from on-premises AD DS. While it also supports Kerberos, it requires a separate managed domain in Azure. In this scenario, the requirement is specifically to use the on-premises AD DS, which involves a different configuration process involving domain-joining the storage account.
- ✓
AD DS Authentication for Azure Files
Why this is correct
By domain-joining the Azure Storage account to the on-premises AD DS environment, users can access Azure file shares using their existing domain credentials. This method supports the enforcement of share-level permissions via Azure RBAC and directory/file-level permissions via standard NTFS ACLs, providing a familiar management model for Windows administrators.
- ✗
Storage Account Access Keys
Why it's wrong here
Access keys provide full administrative access to the entire storage account. Using these keys for user access is a significant security risk as it bypasses individual identity tracking and provides unrestricted control over all data. They do not support granular permissions or integration with Active Directory user accounts for day-to-day file access.
Visual reference
About these practice questions
One of 116 original AZ-802 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This AZ-802 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-802 exam.