Exam SC-300 topic 4 question 56 discussion

Actual exam question from Microsoft's SC-300

Question #: 56
Topic #: 4

HOTSPOT -

You have an Azure subscription named Sub1 that contains two storage accounts named storage1 and storage2 and the blob containers shown in the following table.

Sub1 contains the users shown in the following table.

Condition1 has the following definition:

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by armid at Feb. 17, 2025, 10:17 p.m.

Comments

Submit Cancel

9H3zmT6

2 weeks, 1 day ago

NYY. The definition applies only to Condition1, not to Condition2. User2 is the Storage Blob Data Owner, so User2 can read the contents of blob1.

upvoted 1 times

...

YesPlease

2 months, 3 weeks ago

1) NO, User1 will have "Storage Blob Data Reader" role with a scope tied to the entire Subscription (Sub1), but can only access Blob2 with this role if they meet both of the criteria of Condition1. They meet the first criteria of READ, but not the second condition of the blob data being in the "Cont1" container. 2) YES, User1 meets both criteria of Condition1 because they are able to read the contents of BLOB3 and BLOB3 is in the Cont1 container. 3) NO, User2 will have "Storage Blob Data Owner" role with a scope tied to STORAGE1 (this is where Blob1 lives) but can only access BLOB1 if they meet both of the criteria of Condition2. They DO meet the first criteria of WRITE access, but not the second condition of the blob name containing the number "2" in its name.

upvoted 1 times

...