Exam AZ-305 topic 1 question 2 discussion

A- Correct answer.

Here's why: To enable access to blobs in a container during the month of April only, use shared access signatures (SAS). SAS tokens can be generated with an expiration time and can be scoped to provide granular access control. SAS tokens can easily be generated and distributed to the ten finance department users who need access to the blobs during the month of April. SAS tokens will no longer be valid once they expire, fulfilling the requirement to restrict access to the blobs during the month of April only. Conditional Access policies and certificates/access keys are not suitable for this task.

SAS provide you the start and end date option

A- Correct answer.

A is the answer. https://learn.microsoft.com/en-us/azure/storage/common/authorize-data-access#understand-authorization-for-data-operations Shared access signatures for blobs, files, queues, and tables. Shared access signatures (SAS) provide limited delegated access to resources in a storage account via a signed URL. The signed URL specifies the permissions granted to the resource and the interval over which the signature is valid. A service SAS or account SAS is signed with the account key, while the user delegation SAS is signed with Azure AD credentials and applies to blobs only.

A. Shared Access Signatures (SAS). Shared Access Signatures (SAS) allow you to provide time-limited access to specific resources in your storage account.

A - correct

Correct Answer - A: Shared Access Signatures (SAS) SAS is a unique, secure token that can be generated to provide time-based access permissions to Azure Storage resources. https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview

shared access signitures are used for limited access to files docs etc

Shared Access Signature is right ...

A is correct

A- because its right

A. shared access signatures (SAS)

SAS is right

A is correct

Time sensitive key that can automatically expire.

SAS allow time-limited permissions