Storage
35 free practice questions with explanations
PassNova has 35 free Microsoft Azure Administrator (AZ-104) practice questions on Storage, each with a clear explanation. Practise them in the browser with instant feedback — 100% free, no sign-up, on any device. Updated for 2026.
Storage: example questions & answers
Here are 6 example questions from this topic. Practise the full set of 35 free in the browser.
-
What is the default outbound internet behavior for a newly created Azure storage account in terms of access keys?
- A Anonymous public access is enabled by default
- B Two 512-bit access keys are generated for authorization ✓
- C No keys are created until you enable them
- D Only shared access signatures can be used
Answer: Every storage account is created with two access keys that grant full access; rotating one at a time avoids downtime while keeping the account secured.
-
Which blob access tier is most cost-effective for data that is rarely accessed and stored for at least 180 days?
- A Hot
- B Cool
- C Cold
- D Archive ✓
Answer: The Archive tier offers the lowest storage cost for rarely accessed data with the highest retrieval latency and cost, and has a minimum retention period.
-
A shared access signature (SAS) token primarily provides what?
- A Permanent full access to a storage account
- B Delegated, time-limited access to storage resources ✓
- C Encryption of data at rest
- D Replication between regions
Answer: A SAS grants restricted, time-bound access to specific storage resources with defined permissions, without sharing the account keys.
-
Which Azure Storage redundancy option replicates data synchronously across three availability zones within a single region?
- A Locally redundant storage (LRS)
- B Zone-redundant storage (ZRS) ✓
- C Geo-redundant storage (GRS)
- D Read-access geo-redundant storage (RA-GRS)
Answer: ZRS replicates data synchronously across three availability zones in the primary region, protecting against datacenter-level failures within that region.
-
You must give a user temporary read access to a single blob without exposing account keys. What should you use?
- A A new storage account key
- B A service-level SAS or user-delegation SAS ✓
- C A role assignment at subscription scope
- D A resource lock
Answer: A shared access signature (preferably a user-delegation SAS secured by Entra ID) grants scoped, time-limited read access to the blob without revealing keys.
-
Which Azure storage service provides fully managed file shares accessible over SMB and NFS?
- A Azure Blob Storage
- B Azure Files ✓
- C Azure Queue Storage
- D Azure Table Storage
Answer: Azure Files offers fully managed cloud file shares that can be mounted concurrently by cloud or on-premises clients using SMB or NFS protocols.