Organizing Azure Storage Content with Hierarchical Namespaces

AZ-104 By islever Editorial Last updated

Configure Azure Files and Azure Blob Storage

Short answer

D You can use cont1, share1, and share2 to organize the content as they are the existing storage entities supporting directory structures.

Question

Case study - This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam. You must manage your time to ensure that you are able to complete all questions included on this exam in the time provided. To answer the questions included in a case study, you will need to reference information that is provided in the case study. Case studies might contain exhibits and other resources that provide more information about the scenario that is described in the case study. Each question is independent of the other questions in this case study. At the end of this case study, a review screen will appear. This screen allows you to review your answers and to make changes before you move to the next section of the exam. After you begin a new section, you cannot return to this section. To start the case study - To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore the content of the case study before you answer the questions. Clicking these buttons displays information such as business requirements, existing environment, and problem statements. If the case study has an All Information tab, note that the information displayed is identical to the information displayed on the subsequent tabs. When you are ready to answer a question, click the Question button to return to the question. Overview - ADatum Corporation is consulting firm that has a main office in Montreal and branch offices in Seattle and New York. Existing Environment - Azure Environment - ADatum has an Azure subscription that contains three resource groups named RG1, RG2, and RG3. The subscription contains the storage accounts shown in the following table. The subscription contains the virtual machines shown in the following table. The subscription has an Azure container registry that contains the images shown in the following table. The subscription contains the resources shown in the following table. Azure Key Vault - The subscription contains an Azure key vault named Vault1. Vault1 contains the certificates shown in the following table. Vault1 contains the keys shown in the following table. Microsoft Entra Environment - ADatum has a Microsoft Entra tenant named adatum.com that is linked to the Azure subscription and contains the users shown in the following table. The tenant contains the groups shown in the following table. The adatum.com tenant has a custom security attribute named Attribute1. Planned Changes - ADatum plans to implement the following changes: • Configure a data collection rule (DCR) named DCR1 to collect only system events that have an event ID of 4648 from VM2 and VM4. • In storage1, create a new container named cont2 that has the following access policies: o Three stored access policies named Stored1, Stored2, and Stored3 o A legal hold for immutable blob storage • Whenever possible, use directories to organize storage account content. • Grant User1 the permissions required to link Zone1 to VNet1. • Assign Attribute1 to supported adatum.com resources. • In storage2, create an encryption scope named Scope1. • Deploy new containers by using Image1 or Image2. Technical Requirements - ADatum must meet the following technical requirements: • Use TLS for WebApp1. • Follow the principle of least privilege. • Grant permissions at the required scope only. • Ensure that Scope1 is used to encrypt storage services. • Use Azure Backup to back up cont1 and share1 as frequently as possible. • Whenever possible, use Azure Disk Encryption and a key encryption key (KEK) to encrypt the virtual machines. You need to implement the planned changes for the storage account content. Which containers and file shares can you use to organize the content? - Exhibit: Organizing Azure Storage Content with Hierarchical Namespaces - Exhibit: Organizing Azure Storage Content with Hierarchical Namespaces - Exhibit: Organizing Azure Storage Content with Hierarchical Namespaces - Exhibit: Organizing Azure Storage Content with Hierarchical Namespaces - Exhibit: Organizing Azure Storage Content with Hierarchical Namespaces - Exhibit: Organizing Azure Storage Content with Hierarchical Namespaces - Exhibit: Organizing Azure Storage Content with Hierarchical Namespaces - Exhibit: Organizing Azure Storage Content with Hierarchical Namespaces
  1. share1 only
  2. cont1 and share1 only
  3. share1 and share2 only
  4. cont1, share1, and share2 only Correct Answer
  5. cont1, cont2, share1, and share2

Key Takeaways

The core concept is that while hierarchical namespaces enable efficient folder structures in blobs, standard containers and file shares also serve as organizational units (containers/folders) themselves.

This question tests the ability to identify which Azure storage entities support directory-like organization. The correct answer is D because cont1, share1, and share2 are all valid containers or file shares used for organizing content.

Common mistake: Candidates often select E, believing that the newly planned container 'cont2' should be included in the list of available resources. However, exam questions typically ask about the current environment's capabilities or exclude future state unless explicitly asked.

Expert Analysis

Why the Answer Is Correct

Option D is correct because it includes the three existing storage entities capable of holding organized content: cont1, share1, and share2. cont1 resides in a storage account with a hierarchical namespace enabled (likely Data Lake Storage Gen2), which allows for native directory structures. share1 and share2 are Azure Files shares, which inherently support a directory structure (folders) accessible via SMB/NFS protocols.

Why the Other Options Are Wrong

Option E is incorrect because it includes cont2. The case study states under "Planned Changes" that ADatum plans to create cont2. In certification exams, unless specified otherwise, you must base your answers on the "Existing Environment" provided in the scenario. Since cont2 does not yet exist, it cannot be selected as an available resource for organizing content currently. Option A and B are incomplete, excluding valid file shares or containers.

Community Comment Notes

Community consensus heavily favors D. Users like Megabyte10 and arunyadav09 highlight that cont1 uses hierarchical namespace for organization, while shares naturally support folders. Some users like swk1_az104 debated including cont2, but the prevailing view is that planned changes should not be counted as existing resources. As certainly noted, the key is distinguishing between what exists now versus what is planned.

Exam Strategy

Always carefully distinguish between the "Existing Environment" section and "Planned Changes" sections in case studies. Resources listed in planned changes do not exist yet and should generally not be selected as part of the current solution or inventory unless the question specifically asks for the post-implementation state.

Frequently Asked Questions

Why is cont2 not included in the answer?

Cont2 is listed under 'Planned Changes,' meaning it does not exist in the current environment. Exam answers rely on existing resources unless stated otherwise.

Can file shares organize content?

Yes, Azure Files shares (like share1 and share2) support a directory structure similar to traditional file systems, allowing for organized content.

More AZ-104 FAQ →

Community Votes

D
100%

100% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 6 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 6

  1. Megabyte10 👍 7 Answered D
    cont1: The container in storage1 with a hierarchical namespace is specifically designed to organize content efficiently. share1 and share2: Both are file shares in storage2 and are not restricted by the hierarchical namespace feature. They can still be used to organize content effectively. Using all three (cont1, share1, and share2) allows for a comprehensive organization strategy across different storage types, adhering to the planned changes and technical requirements.
  2. arunyadav09 👍 4 Answered D
    file shares are good to organizing content, Cont1 is with a hierarchical namespace used for organizing content.
  3. swk1_az104 👍 2 Answered E
    In my mind this is correct, but what MS thinks, you'll never know...so please @all give feedbacks, discuss...on this: Given the ability to use directories in Storage1 and simulate directories in Storage2, the containers and file shares that can be used to organize the content are: E. cont1, cont2, share1, and share2 Explanation cont1: Supports hierarchical namespaces, allowing directory organization. cont2: Although it does not support hierarchical namespaces, you can use prefixes in blob names to simulate a directory structure. share1: Supports directories and subdirectories for organizing content. share2: Supports directories and subdirectories for organizing content. This option includes all the containers and file shares that can be used to organize the content based on the existing environment and the planned changes, while adhering to the technical requirements and the principle of least privilege.
  4. certainly 👍 2
    I go with D. Here’s why: • cont1 is in a storage account with a hierarchical namespace, which is suitable for organizing content. • share1 and share2 are file shares, and organizing content within file shares is not restricted by the hierarchical namespace feature, so both can be used for organization.
  5. esyan 👍 1
    is there any reason doesn't mention about cont2? i think cont2 is possible too, because planned changes. "Planned Changes - ADatum plans to implement the following changes: • Configure a data collection rule (DCR) named DCR1 to collect only system events that have an event ID of 4648 from VM2 and VM4. "• In storage1, create a new container named cont2 that has the following access policies: o Three stored access policies named Stored1, Stored2, and Stored3 o A legal hold for immutable blob storage"
Show 1 more comment
  1. lubas 👍 1 Answered D
    Cont1, Share1 e Share2

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Enable SSPR for Entra Identities

S-grade

Assigning Fabric Licenses in Entra ID Free Tenant

S-grade

Which Certificate from Vault1 for WebApp1 TLS?

S-grade

Does Storage Account Encryption Scope Contributor Role Allow Key Regeneration?

S-grade

Practice All AZ-104 Questions

Access 100 questions with complete answers and detailed explanations.

View Full AZ-104 Practice Test →

← Back to AZ-104 Study Guide