Exam DP-201 topic 3 question 22 discussion

Actual exam question from Microsoft's DP-201

Question #: 22
Topic #: 3

You are designing an app that will provide a data cleaning and supplementing service for customers. The app will use Azure Data Factory to run a daily process to read and write data from Azure Storage blob containers.
You need to recommend an access mechanism for the customers to grant the app access to their data. The solution must meet the following requirements:
✑ Provide access for a period of three months.
✑ Restrict the app's access to specific containers.
✑ Minimize administrative effort.
✑ Minimize changes to the existing access controls of the customer's Azure Storage accounts.
What should you recommend?

A. a shared key
B. anonymous public read access
C. a managed identity
D. a shared access signature (SAS)

Show Suggested Answer

Suggested Answer: D 🗳️
A shared access signature (SAS) provides secure delegated access to resources in your storage account. With a SAS, you have granular control over how a client can access your data. For example:
✑ What resources the client may access.
✑ What permissions they have to those resources.
✑ How long the SAS is valid.
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview

by memo43 at May 23, 2021, 12:28 p.m.

Comments

Submit Cancel

memo43

4 years ago

keyword is -->> Provide access for a period of three months.

upvoted 4 times

...