1
MST400: FINAL EXAM REVIEWER 2026
LATEST UPDATED QUESTIONS WITH
ANSWERS SUCCESS GUIDE.
Suppose you have two video files stored as blobs. One of
the videos is business-critical and requires a replication
policy that creates multiple copies across geographically
diverse datacenters. The other video is non-critical, and a
local replication policy is sufficient. Which of the following
options would satisfy both data diversity and cost
sensitivity consideration.
A.Create a single storage account that makes use of
Local-redundant storage (LRS) and host both videos
fromhere.
B.Create a single storage account that makes use of Geo-
redundant storage (GRS) and host both videos from here.
C.Create two storage accounts. The first account makes
use of Geo-redundant storage (GRS) and hosts
thebusiness-critical video content. The second account
makes use of Local-redundant storage (LRS) and hosts
thenon-critical video content. -
-Correct Answer -C.Create two storage accounts. The
first account makes use of Geo-redundant storage (GRS)
and hosts thebusiness-critical video content. The second
account makes use of Local-redundant storage (LRS) and
hosts thenon-critical video content.
The name of a storage account must be:
Unique within the containing resource group.
1
, 2
Unique within your Azure subscription.
Globally unique. -
-Correct Answer -Globally unique.
In a typical project, when would you create your storage
account(s)?
At the beginning, during project setup.
After deployment, when the project is running.
At the end, during resource cleanup. -
-Correct Answer -beginning, during project setup.
Your organization has an internal system to share patient
appointment information and notes. You can secure a
user's access based on their membership in an Azure
Active Directory (Azure AD) group. Which kind of
authorization supports this scenario best, and why?
Use a shared access signature (SAS) token. You use the
Azure AD credentials and a user delegation SAS token.
Use Azure Active Directory. By using Azure AD, you can
create a service principal to authenticate the app.
Use a shared key. The Azure Storage account can create
and revoke keys that will be used in your app. -
-Correct Answer -Use Azure Active Directory. By using
Azure AD, you can create a service principal to
authenticate the app.
Your public-facing static website stores all its public UI
images in blob storage. The website needs to display the
graphics without any kind of authorization. Which is the
best option?
2
, 3
Public access
Shared key
Shared access signature -
-Correct Answer -Public access
Public Access:
Public access is a type of access policy for cloud storage
services or resources, which allows anyone with the
resource's URL or endpoint to access the resource. Public
access is often used for web content, such as images,
videos, and other static files that are intended to be
publicly accessible.
Shared Key:
Shared Key is a type of access policy used for securing
access to cloud storage services or resources. It is a
security mechanism that relies on a shared secret key
between the client and the storage service. The client
must provide the shared key along with their request to
access the resource, and the storage service validates the
key to determine if the request is authorized.
Shared Access Signature (SAS):
A Shared Access Signature (SAS) is another type of
access policy used for securing access to cloud storage
services or resources. It is a secure way to grant limited
access to a resource without exposing the account key or
requiring the user to authenticate with the storage service.
A SAS token is generated by the storage service and
includes a set of permissions and an expiration time. The
token can be used by clients to access the resource for a
specific period, after which the token expires, and the
access is revoked. SAS tokens can be revoked or
3
, 4
regenerated at any time, providing fine-grained control
over resource access.
Which of these disk roles should you use to store a set of
help videos that explain how to use the accounting
application?
OS disk
Data disk
Temporary disk -
-Correct Answer -Data disk
OS Disk:
An OS (Operating System) Disk is a type of storage in a
computer or server that stores the operating system and
related software files. It is the primary disk on which the
computer boots, and it contains the system files necessary
to run the computer's hardware and software. It usually
has a fixed size and is not intended for storing data files or
user data.
Data Disk:
A Data Disk is a type of storage used for storing data files
or user data. It is typically used for storing user-generated
files such as documents, photos, videos, and databases.
Unlike an OS Disk, a data disk can be resized, and it can
be detached from one instance and attached to another
instance, making it easy to move data between different
servers or machines.
Temporary Disk:
A Temporary Disk is a type of storage that is provided with
virtual machines in cloud computing environments. It is a
temporary storage space that is used for short-term
storage or caching. It is often used for storing data that is
4
MST400: FINAL EXAM REVIEWER 2026
LATEST UPDATED QUESTIONS WITH
ANSWERS SUCCESS GUIDE.
Suppose you have two video files stored as blobs. One of
the videos is business-critical and requires a replication
policy that creates multiple copies across geographically
diverse datacenters. The other video is non-critical, and a
local replication policy is sufficient. Which of the following
options would satisfy both data diversity and cost
sensitivity consideration.
A.Create a single storage account that makes use of
Local-redundant storage (LRS) and host both videos
fromhere.
B.Create a single storage account that makes use of Geo-
redundant storage (GRS) and host both videos from here.
C.Create two storage accounts. The first account makes
use of Geo-redundant storage (GRS) and hosts
thebusiness-critical video content. The second account
makes use of Local-redundant storage (LRS) and hosts
thenon-critical video content. -
-Correct Answer -C.Create two storage accounts. The
first account makes use of Geo-redundant storage (GRS)
and hosts thebusiness-critical video content. The second
account makes use of Local-redundant storage (LRS) and
hosts thenon-critical video content.
The name of a storage account must be:
Unique within the containing resource group.
1
, 2
Unique within your Azure subscription.
Globally unique. -
-Correct Answer -Globally unique.
In a typical project, when would you create your storage
account(s)?
At the beginning, during project setup.
After deployment, when the project is running.
At the end, during resource cleanup. -
-Correct Answer -beginning, during project setup.
Your organization has an internal system to share patient
appointment information and notes. You can secure a
user's access based on their membership in an Azure
Active Directory (Azure AD) group. Which kind of
authorization supports this scenario best, and why?
Use a shared access signature (SAS) token. You use the
Azure AD credentials and a user delegation SAS token.
Use Azure Active Directory. By using Azure AD, you can
create a service principal to authenticate the app.
Use a shared key. The Azure Storage account can create
and revoke keys that will be used in your app. -
-Correct Answer -Use Azure Active Directory. By using
Azure AD, you can create a service principal to
authenticate the app.
Your public-facing static website stores all its public UI
images in blob storage. The website needs to display the
graphics without any kind of authorization. Which is the
best option?
2
, 3
Public access
Shared key
Shared access signature -
-Correct Answer -Public access
Public Access:
Public access is a type of access policy for cloud storage
services or resources, which allows anyone with the
resource's URL or endpoint to access the resource. Public
access is often used for web content, such as images,
videos, and other static files that are intended to be
publicly accessible.
Shared Key:
Shared Key is a type of access policy used for securing
access to cloud storage services or resources. It is a
security mechanism that relies on a shared secret key
between the client and the storage service. The client
must provide the shared key along with their request to
access the resource, and the storage service validates the
key to determine if the request is authorized.
Shared Access Signature (SAS):
A Shared Access Signature (SAS) is another type of
access policy used for securing access to cloud storage
services or resources. It is a secure way to grant limited
access to a resource without exposing the account key or
requiring the user to authenticate with the storage service.
A SAS token is generated by the storage service and
includes a set of permissions and an expiration time. The
token can be used by clients to access the resource for a
specific period, after which the token expires, and the
access is revoked. SAS tokens can be revoked or
3
, 4
regenerated at any time, providing fine-grained control
over resource access.
Which of these disk roles should you use to store a set of
help videos that explain how to use the accounting
application?
OS disk
Data disk
Temporary disk -
-Correct Answer -Data disk
OS Disk:
An OS (Operating System) Disk is a type of storage in a
computer or server that stores the operating system and
related software files. It is the primary disk on which the
computer boots, and it contains the system files necessary
to run the computer's hardware and software. It usually
has a fixed size and is not intended for storing data files or
user data.
Data Disk:
A Data Disk is a type of storage used for storing data files
or user data. It is typically used for storing user-generated
files such as documents, photos, videos, and databases.
Unlike an OS Disk, a data disk can be resized, and it can
be detached from one instance and attached to another
instance, making it easy to move data between different
servers or machines.
Temporary Disk:
A Temporary Disk is a type of storage that is provided with
virtual machines in cloud computing environments. It is a
temporary storage space that is used for short-term
storage or caching. It is often used for storing data that is
4
