Examkin

Soru

Zorluk: OrtaManage Data Movement using AzCopy and Storage Explorer

An administrator needs to automate a nightly upload of backup files from an on-premises server to an Azure Storage account named `stbackup2026`. The storage account has shared key access disabled to comply with company security policies. You plan to use AzCopy with a Microsoft Entra ID service principal to perform the transfer.

Which sequence of steps should the administrator perform to configure and run the daily upload process?

  1. 1Create a Microsoft Entra ID service principal.
  2. 2Assign the Storage Blob Data Contributor role to the service principal at the scope of the destination storage account.
  3. 3Run the `azcopy login` command using the service principal's application ID, tenant ID, and client secret.
  4. 4Run the `azcopy copy` command using the local path as the source and the target blob container URL as the destination.

Cevap

Create a service principal, assign the Storage Blob Data Contributor role to it, run azcopy login using the service principal, and then run azcopy copy to upload the files.
The correct sequence is to create the service principal first, assign the required role (Storage Blob Data Contributor) to the service principal, log in to the AzCopy session using the service principal credentials, and finally execute the copy command.

Adım Adım Çözüm

1
Create the Microsoft Entra ID service principal
An identity is created that can be authenticated by AzCopy.
AzCopy requires an identity to log in when shared key access is disabled.
2
Assign the Storage Blob Data Contributor role to the service principal
The service principal is authorized to write to the destination blob storage container.
Without the Storage Blob Data Contributor role, the service principal cannot write data to the container.
3
Run the azcopy login command using the service principal credentials
The terminal session is authenticated with Azure.
The CLI session must be authenticated before it can execute commands against the storage account.
4
Run the azcopy copy command
The backup files are copied from the on-premises server to the Azure blob container.
This initiates the actual data movement using the authenticated and authorized service principal.

Anahtar Kavram

Configuring secure data movement with AzCopy using Microsoft Entra ID authentication and role-based access control (RBAC)
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Manage Data Movement using AzCopy and Storage Explorer

Bu konudan daha fazla soru