AZ-104 Practice Questions: Storage Security, Access, and Data Protection

Storage Security, Access, and Data Protection

Question 1 of 30

Time left: 00:00

You need to grant a vendor temporary read access to blobs in a single container for the next 24 hours. The vendor must not be able to list or access queues, tables, or file shares in the same storage account. Which method is the most appropriate?

Select one option.

Generate an account SAS with read permission and a 24-hour expiry
Share the storage account access key and rotate it after 24 hours
Generate a service SAS scoped to the target blob container with read permission and a 24-hour expiry
Assign the Storage Blob Data Reader role at the subscription scope
Create a private endpoint for the vendor and allow anonymous blob access

You have used 0 of 1 attempt

Next ▶