The AZ-500 exam has been retired
It was retired on August 31, 2026. It was replaced by SC-500 (Microsoft Cloud and AI Security Engineer). Go to the SC-500 study guide →
Copyright (c) 2026 MindMesh Academy. All rights reserved. This content is proprietary and may not be reproduced or distributed without permission.
4.2.3. Azure Files and Blob Storage Security
💡 First Principle: Different storage types have different access methods. Azure Files supports SMB/NFS protocols; Blob Storage supports REST APIs. Each has specific security considerations.
Azure Files Authentication
| Protocol | Authentication Options |
|---|---|
| SMB | Microsoft Entra Domain Services, on-premises AD DS, storage key |
| NFS | Virtual network controls (no user authentication) |
Blob Storage Public Access
| Setting | Effect |
|---|---|
| Storage account: Allow Blob public access | Master switch for the account |
| Container: Public access level = Blob | Anonymous read for blobs only |
| Container: Public access level = Container | Anonymous read for container and blobs |
| Container: Public access level = Private | No anonymous access |
⚠️ Exam Trap: Setting container access to "Blob" when trying to follow least privilege. For public anonymous access to a single file, "Blob" level is more restrictive than "Container" level—"Container" allows listing all blobs.
Enroll to unlock the 5 practice questions written for this section, so you can test what you just read while it is fresh.
Enroll to unlock the 2 flashcards for this section and review them on a spaced-repetition schedule.
Written byAlvin Varughese
Founder•20 professional certifications