Microsoft Azure Architect Design (AZ-304) Practice Test

What additional Azure service should be used to support providing users with access to shared files in Azure Storage?

1. An Azure AD enterprise application

2. Azure Information Protection

3. An Azure AD Domain Services (Azure AD DS) instance

4. An Azure Front Door instance

The correct answer is: An Azure AD Domain Services (Azure AD DS) instance

To provide users access to shared files in Azure Storage, utilizing Azure Active Directory Domain Services (Azure AD DS) is essential because it enables traditional Active Directory features such as domain join, group policy, and LDAP, while integrating seamlessly with Azure services. Azure AD DS allows organizations to implement file shares using SMB (Server Message Block) protocol, which requires domain authentication for secure access. When using Azure Storage, especially for scenarios where users need to access shared files securely using familiar authentication methods, Azure AD DS can facilitate this by allowing users to authenticate with their existing credentials. It bridges the gap between modern cloud applications and legacy enterprise environments, making it suitable for hybrid or fully cloud-based architectures. The other options serve different purposes but do not directly provide the same necessary features for shared file access: - An Azure AD enterprise application is primarily for integrating third-party applications with Azure AD for user authentication and authorization, rather than providing file access. - Azure Information Protection is focused on securing and protecting documents through encryption and rights management, not specifically on facilitating shared file access. - An Azure Front Door instance is designed for optimizing web traffic and application performance, functioning as a global entry point for web applications, but it does not facilitate shared file access directly in Azure Storage.