Storage
42 practice questions with explanations — 15 free to try
3 of these 42 questions are in the free 15-question taster · the full topic is part of Premium
PassNova has 42 Microsoft Azure Administrator (AZ-104) practice questions on Storage, each with a clear explanation. A 15-question taster is free with no sign-up; the full bank is part of PassNova Premium. Updated for 2026.
Storage: example questions & answers
3 worked examples with answers and explanations below. Try 15 Microsoft Azure Administrator (AZ-104) questions free in the browser; the full 42-question Storage bank is part of PassNova Premium.
Which statement is true by default for a newly created Azure storage account?
- AAccess keys are created only once you enable them
- BAnonymous public access is enabled by default
- CTwo 512-bit access keys are generated for authorization✓
- DOnly shared access signatures can be used
Answer: Every new storage account is created with two 512-bit access keys (key1 and key2) that grant full access, so one can be rotated while applications use the other. Anonymous blob access is disallowed by default on new accounts, the keys exist from the moment the account is created, and SAS tokens are only one of several ways to authorise requests.
Which blob access tier is most cost-effective for data that is rarely accessed and stored for at least 180 days?
- ACold
- BArchive✓
- CHot
- DCool
Answer: The Archive tier offers the lowest storage cost for rarely accessed data with the highest retrieval latency and cost, and has a minimum retention period.
A shared access signature (SAS) token primarily provides what?
- APermanent full access to a storage account and its keys for whoever holds the token
- BDelegated, time-limited access to storage resources✓
- CReplication of the account's data between two Azure regions
- DEncryption of the data at rest using a key held in Key Vault
Answer: A SAS grants restricted, time-bound access to specific storage resources with defined permissions, without sharing the account keys.