nerdexam
Microsoft

AZ-204 · Question #102

You manage a data processing application that receives requests from an Azure Storage queue. You need to manage access to the queue. You have the following requirements: - Provide other applications a

The correct answer is A. Service SAS with a stored access policy. A service SAS is secured with the storage account key. A service SAS delegates access to a resource in only one of the Azure Storage services: Blob storage, Queue storage, Table storage, Stored access policies give you the option to revoke permissions for a service SAS without ha

Submitted by klara.se· Mar 30, 2026Implement Azure security

Question

You manage a data processing application that receives requests from an Azure Storage queue. You need to manage access to the queue. You have the following requirements: - Provide other applications access to the Azure queue. - Ensure that you can revoke access to the queue without having to regenerate the storage account keys. - Specify access at the queue level and not at the storage account level. Which type of shared access signature (SAS) should you use?

Options

  • AService SAS with a stored access policy
  • BAccount SAS
  • CUser Delegation SAS
  • DService SAS with ad hoc SAS

How the community answered

(39 responses)
  • A
    82% (32)
  • B
    3% (1)
  • C
    5% (2)
  • D
    10% (4)

Explanation

A service SAS is secured with the storage account key. A service SAS delegates access to a resource in only one of the Azure Storage services: Blob storage, Queue storage, Table storage, Stored access policies give you the option to revoke permissions for a service SAS without having to regenerate the storage account keys. https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview

Topics

#Shared Access Signature#stored access policy#queue storage#access revocation

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-204 Practice