Exam DP-201 topic 3 question 14 discussion

Actual exam question from Microsoft's DP-201

Question #: 14
Topic #: 3

You have an Azure Storage account.
You plan to copy one million image files to the storage account.
You plan to share the files with an external partner organization. The partner organization will analyze the files during the next year.
You need to recommend an external access solution for the storage account. The solution must meet the following requirements:
✑ Ensure that only the partner organization can access the storage account.
Ensure that access of the partner organization is removed automatically after 365 days.

What should you include in the recommendation?

A. shared keys
B. Azure Blob storage lifecycle management policies
C. Azure policies
D. shared access signature (SAS)

Show Suggested Answer

Suggested Answer: D 🗳️
A shared access signature (SAS) is a URI that grants restricted access rights to Azure Storage resources. You can provide a shared access signature to clients who should not be trusted with your storage account key but to whom you wish to delegate access to certain storage account resources. By distributing a shared access signature URI to these clients, you can grant them access to a resource for a specified period of time, with a specified set of permissions.
Reference:
https://docs.microsoft.com/en-us/rest/api/storageservices/delegate-access-with-shared-access-signature

by memo43 at May 23, 2021, 11:25 a.m.

Comments

Submit Cancel

memo43

4 years ago

keyword is -->> removed automatically after 365 days.

upvoted 3 times

...