Merge pull request #54053 from staleycyn/patch-1

Content drift for guided project on blobs and files

Author: JamesJBarnett

learn-pr/wwl-azure/guided-project-azure-files-azure-blobs/7-knowledge-check.yml

@@ -38,7 +38,7 @@ quiz:
       explanation: "Incorrect. Data redundancy protects from planned and unplanned events."
     - content: "Lifecycle management"
       isCorrect: true
-      explanation: "Correct. A time-based immutable storage policy rule can set conditions and move data between storage tiers."
+      explanation: "Correct. Lifecycle management policies define rules with conditions based on age, last modified time, or last access time. Actions include transitioning blobs to cooler storage tiers or deleting them to optimize costs as data ages."
   - content: "Your company uses an Azure storage account for storing large numbers of video and audio files. The company wants the ability to revoke access to the files and to change the period for which users can access the files. What should you do?"
     choices:
     - content: "Provide a shared access signature (SAS)"
@@ -60,4 +60,4 @@ quiz:
       explanation: "Incorrect. This method isn't recommended because the application owner or developer must rotate the certificate."
     - content: "Managed identities"
       isCorrect: true
-      explanation: "Correct. The benefit of this approach is that Azure automatically rotates the identity."
+      explanation: "Correct. The benefit of this approach is that Azure automatically rotates the identity."

learn-pr/wwl-azure/guided-project-azure-files-azure-blobs/includes/1-introduction.md

@@ -18,16 +18,16 @@ The module is divided into five exercises, each covering a specific storage scen
 By the end of this module, you gain hands-on experience in creating and configuring Azure Files and Azure Blob Storage for different storage scenarios. You can apply this knowledge to your own projects and provide secure and efficient storage solutions.
 
 > [!NOTE]
-> This is a guided project module where you complete an end-to-end project by following step-by-step instructions. 
+> A guided project is where you complete an end-to-end project by following step-by-step instructions. 
 
 ## Skilling areas
 
 You use the Azure documentation to [review your storage options](/azure/cloud-adoption-framework/ready/considerations/storage-options). The project requires configuring storage accounts, Azure blobs, Azure Files, storage encryption, and storage networking. For each area, you identify the subtasks you need to become familiar with.
 
 | Skilling area | Skilling task |
 | --- | --- | 
-| **Create and configure a storage account** | <ul><li> Configure the storage account tier, including hot and cool. </li><li> Configure redundancy settings, including zone-redundant and geo-redundant storage.</li><li> Configure secure transfer and TLS version. </li><li> Configure storage replication. </li></ul> |
-| **Create and configure blob storage** |<ul><li> Create a Blob Storage container. </li><li>  Configure the access level for blob storage.</li><li> Configure the blob storage tiers. </li><li> Configure lifecycle management. </li><li>  Configure data protection for blob storage. </li></ul> |
+| **Create and configure a storage account** | <ul><li> Configure the storage account tier, including hot, cool, and cold. </li><li> Configure redundancy settings, including zone-redundant and geo-redundant storage.</li><li> Configure secure transfer and TLS version. </li><li> Configure storage replication. </li></ul> |
+| **Create and configure blob storage** |<ul><li> Create a Blob Storage container. </li><li>  Configure the access level for blob storage. Understand the security implications of enabling anonymous public access.</li><li> Configure the blob storage tiers. </li><li> Configure lifecycle management, including transitioning data to the cool, cold, or archive tier based on age or access patterns. </li><li>  Configure data protection for blob storage. </li></ul> |
 | **Create and configure Azure Files** | <ul><li>  Create an Azure Files share, including directories. </li><li> Configure performance tiers, like standard and premium. </li><li> Configure data protection for Azure Files, such as snapshots. </li></ul>  |
 | **Configure encryption for storage** | <ul><li> Configure encryption for data at rest, including Microsoft managed keys and customer managed keys. </li><li>  Configure encryption for data in transit. </li></ul> |
 | **Configure networking​ for storage** | <ul><li> Create and configure private endpoints. </li><li>  Create and configure service endpoints. </li><li> Configure Azure Storage firewalls and virtual networks. </li></ul>|

learn-pr/wwl-azure/guided-project-azure-files-azure-blobs/includes/3-exercise-public-website-storage.md

@@ -10,6 +10,12 @@ The company website supplies product images, videos, marketing literature, and c
 Launch the exercise and follow the instructions. When you're done, be sure to return to this page so you can continue learning.
 
 > [!NOTE]
-> To complete this lab you will need an [Azure subscription](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn).
+> To complete this lab, you need an [Azure subscription](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn).
+
+> [!CAUTION]
+> Enabling anonymous public access is demonstrated here for learning purposes only. Microsoft recommends keeping anonymous access disabled. Instead use shared access signatures or Azure CDN with authenticated origin access for secure public content delivery.
+
+
+
 
 [![Button to launch exercise.](../media/launch-exercise.png)](https://go.microsoft.com/fwlink/?linkid=2261879)

learn-pr/wwl-azure/guided-project-azure-files-azure-blobs/includes/4-exercise-private-company-storage.md

@@ -6,9 +6,16 @@ The company needs storage for their offices and departments. This content is pri
 | --- | --- |
 | :::image type="content" source="../media/task-3.png" alt-text="Diagram with one storage account and two blob containers." border="true"::: | <ul><li>Create a storage account.<li>Create a storage container with restricted access.</li><li>Configure a shared access signature for partners.</li><li>Back up the public website storage.<li>Implement lifecycle management to move content to the cool tier.</li></ul>|
 
+> [!Important]
+> This exercise uses a service SAS for simplicity, but Microsoft recommends user delegation SAS backed by Microsoft Entra ID for production scenarios.
+
 Launch the exercise and follow the instructions. When you're done, be sure to return to this page so you can continue learning.
 
 > [!NOTE]
-> To complete this lab you will need an [Azure subscription](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn).
+> To complete this lab, you need an [Azure subscription](https://azure.microsoft.com/pricing/purchase-options/azure-account?cid=msft_learn).
+
+
+
+
 
 [![Button to launch exercise.](../media/launch-exercise.png)](https://go.microsoft.com/fwlink/?linkid=2262131)

learn-pr/wwl-azure/guided-project-azure-files-azure-blobs/includes/8-summary.md

@@ -1,7 +1,7 @@
 In this module, you learned about different storage scenarios and how to provide storage for each of them. 
 - The first scenario was providing storage for the IT department's testing and training. For this scenario, you learned how to create a storage account and configure basic settings for security and networking. 
 - The second scenario was providing storage for the public website. You learned how to create a storage account with anonymous public access, create a blob storage container, and enable soft delete and versioning. 
-- The third scenario was providing private storage for internal company documents. You learned how to create a storage container with restricted access and configure a shared access signature for partners. You also learned how to back up the public website storage and implement lifecycle management to move content to the cool tier. 
+- The third scenario was providing private storage for internal company documents. You learned how to create a storage container with restricted access and configure a shared access signature for partners. You also learned how to back up the public website storage. And, how to implement lifecycle management to move content to the cool tier. 
 - The fourth scenario provided shared file storage for the company offices and storage for a new company app.
 
 ## Key takeaways
@@ -18,12 +18,12 @@ Here are the main takeaways for the module.
 - Read more about [Azure storage accounts](/azure/storage/common/storage-account-overview?toc=%2Fazure%2Fstorage%2Fblobs%2Ftoc.json)
 - Read more about [Azure Blob Storage](/azure/storage/blobs/storage-blobs-introduction).
 - Read more about [Azure Files](/azure/storage/files/storage-files-introduction).
-- Read more about [storage accounts and security](/azure/architecture/framework/services/storage/storage-accounts/security)
+
 
 ## Learn more with online training
 
 - [Create an Azure Storage account](/training/modules/create-azure-storage-account/) with the correct options for your business needs.
 - [Configure Azure Blob Storage](/training/modules/configure-blob-storage/), including tiers and object replication.
 - [Configure Azure Storage security](/training/modules/configure-storage-security/) features like storage access signatures.
 - [Secure and isolate access to Azure resources by using network security groups and service endpoints](/training/modules/secure-and-isolate-with-nsg-and-service-endpoints/)
-- [Implement storage security](/training/modules/storage-security/) for Azure storage resources. 
+- [Implement storage security](/training/modules/storage-security/) for Azure storage resources. 

learn-pr/wwl-azure/guided-project-azure-files-azure-blobs/index.yml

@@ -3,8 +3,8 @@ uid: learn.wwl.guided-project-azure-files-azure-blobs
 metadata:
   title: Guided Project - Azure Files and Azure Blobs
   description: "Guided Project - Azure Files and Azure Blobs"
-  ms.date: 01/26/2026
-  author: wwlpublish
+  ms.date: 03/23/2026
+  author: staleycyn
   ms.author: cynthist
   ms.topic: module
   ms.custom: