Lock operators map \\account.file.core.windows.net\share by pasting the storage account key into Windows. Which access method should the security engineer select instead?
Select an answer to reveal the explanation.
Short Explanation
Stop pasting the silo key into every Windows map-network-drive dialog. Hook SMB up to AD DS, Entra Domain Services, or Entra Kerberos so operators sign in as themselves.
Full Explanation
Azure Files supports identity-based authentication over SMB with on-premises Active Directory Domain Services, Microsoft Entra Domain Services, or Microsoft Entra Kerberos for hybrid identities, replacing shared account-key mounts for people and domain-joined clients. Account-key SMB remains powerful and hard to attribute. Anonymous public SMB is not an appropriate substitute. Private Endpoints may accompany Files hardening but do not by themselves replace identity-based authentication.