Exam AZ-500 topic 2 question 106 discussion

Actual exam question from Microsoft's AZ-500

Question #: 106
Topic #: 2

You have an Azure subscription that contains a user named User1 and a storage account that hosts a blob container named blob1.

You need to grant User1 access to blob1. The solution must ensure that the access expires after six days.

What should you use?

A. a shared access signature (SAS)
B. role-based access control (RBAC)
C. a shared access policy
D. a managed identity

Show Suggested Answer

Suggested Answer: A 🗳️

by Anarchira at June 20, 2023, 6:20 p.m.

Comments

Submit Cancel

OrangeSG

8 months, 3 weeks ago

Selected Answer: A

A shared access signature (SAS) is a URI that grants access to Azure Storage resources without requiring a storage account key. SAS tokens can be used to grant access to specific resources, such as a blob container, for a specific period of time. To grant User1 access to blob1 with an expiration of six days, you can create a SAS token with the following parameters: - Permissions: r, w, or d, depending on the level of access that you want to grant. - Start time: The current time. - Expiry time: Six days from now. Once you have created the SAS token, you can provide it to User1. User1 can then use the SAS token to access blob1 until the expiry time.

upvoted 2 times

...