Exam AZ-204 topic 4 question 38 discussion

Actual exam question from Microsoft's AZ-204

Question #: 38
Topic #: 4

A development team is creating a new REST API. The API will store data in Azure Blob storage. You plan to deploy the API to Azure App Service.
Developers must access the Azure Blob storage account to develop the API for the next two months. The Azure Blob storage account must not be accessible by the developers after the two-month time period.
You need to grant developers access to the Azure Blob storage account.
What should you do?

A. Generate a shared access signature (SAS) for the Azure Blob storage account and provide the SAS to all developers.
B. Create and apply a new lifecycle management policy to include a last accessed date value. Apply the policy to the Azure Blob storage account.
C. Provide all developers with the access key for the Azure Blob storage account. Update the API to include the Coordinated Universal Time (UTC) timestamp for the request header.
D. Grant all developers access to the Azure Blob storage account by assigning role-based access control (RBAC) roles.

Show Suggested Answer

Suggested Answer: A 🗳️

by sghaha at April 29, 2022, 5:35 a.m.

Comments

Submit Cancel

alexein74

Highly Voted 2 years, 4 months ago

Selected Answer: A

A. Generate a shared access signature (SAS) for the Azure Blob storage account and provide the SAS to all developers. A shared access signature (SAS) is a secure token that can be used to grant temporary and revocable access to a blob container or individual blobs. You can specify an expiration time for the SAS, so it will automatically expire after the two-month time period, making the blob storage account no longer accessible to the developers. This approach allows you to grant the developers the necessary access to the Azure Blob storage account while still maintaining control over the access, and it also allows you to revoke access easily after the two-month time period.

upvoted 10 times

...

Vichu_1607

Most Recent 7 months, 1 week ago

Selected Answer: A

A. Generate a shared access signature (SAS) for the Azure Blob storage account and provide the SAS to all developers. Most Voted

upvoted 1 times

...

richardc7

1 year, 8 months ago

got in exam 28/09/2029

upvoted 3 times

...

BaoNguyen2411

1 year, 10 months ago

got this question on 06-29-2023

upvoted 4 times

...

OPT_001122

2 years, 7 months ago

Selected Answer: A

A seems to be the correct answer

upvoted 4 times

...

taki_ananasek

2 years, 7 months ago

Seems it's B A JWT contains three segments, a header, a body, and a signature. The signature segment can be used to validate the authenticity of the token so that it can be trusted by your application. https://learn.microsoft.com/en-us/azure/active-directory-b2c/tokens-overview#validation

upvoted 1 times

ThaDude

2 years, 5 months ago

Comment applies to different question

upvoted 5 times

...

gmishra88

2 years, 8 months ago

In practical situations, especially it is about your own developers (not outsiders) and expected to have AD roles, it is good to give RBAC roles and remove it after 2 months. But, I guess Microsoft wants to answer SAS. So, please choose SAS as the answer

upvoted 3 times