Exam DP-200 topic 3 question 26 discussion

Actual exam question from Microsoft's DP-200

Question #: 26
Topic #: 3

You have an Azure Blob storage account.
Developers report that an HTTP 403 (Forbidden) error is generated when a client application attempts to access the storage account. You cannot see the error messages in Azure Monitor.
What is a possible cause of the error?

A. The client application is using an expired shared access signature (SAS) when it sends a storage request.
B. The client application deleted, and then immediately recreated a blob container that has the same name.
C. The client application attempted to use a shared access signature (SAS) that did not have the necessary permissions.
D. The client application attempted to use a blob that does not exist in the storage service.

Show Suggested Answer

Suggested Answer: C 🗳️
Reference:
https://docs.microsoft.com/en-us/rest/api/storageservices/sas-error-codes

by Wendy_DK at May 2, 2021, 1:07 a.m.

Comments

Submit Cancel

Wendy_DK

Highly Voted 4 years, 3 months ago

Answer is A. https://docs.microsoft.com/en-us/azure/storage/common/storage-monitoring-diagnosing-troubleshooting?tabs=dotnet If your client application is throwing HTTP 403 (Forbidden) errors, a likely cause is that the client is using an expired Shared Access Signature (SAS) when it sends a storage request (although other possible causes include clock skew, invalid keys, and empty headers). If an expired SAS key is the cause, you will not see any entries in the server-side Storage Logging log data.

upvoted 20 times

...

emski

Most Recent 4 years, 2 months ago

I'd also go for A because the question indicated that you cannot see any error information from the logs.

upvoted 2 times

...

Psycho

4 years, 3 months ago

Based on the shared link provided by wendy, I also would choice option A

upvoted 1 times

...