nerdexam
Microsoft

AZ-500 · Question #248

Your organization wants to share some confidential drawings of a new design project with a customer. You are asked to provide read-only access to the files containing drawings, with the files…

The correct answer is C. Create a blob container. Generate a new shared access signature (SAS) allowing read access. The most cost-effective and secure way to share confidential read-only files for a short period, accessible from a static IP, is by using Azure Blob Storage with a Shared Access Signature (SAS).

Submitted by haru.x· Mar 6, 2026Secure compute, storage, and databases

Question

Your organization wants to share some confidential drawings of a new design project with a customer. You are asked to provide read-only access to the files containing drawings, with the files configured to stay with the customer for a short period of time, accessible from customer's office. A static IP address is used to connect to the internet at the customer's office. You need to provide the most cost-effective, secure solution. Which of the following is the best step to take?

Options

  • ACreate a new web application and enable the Secure File Transfer Protocol (SFTP) feature.
  • BCreate a new virtual machine (VM) using the B1S Stock Keeping Unit (SKU). Create a network
  • CCreate a blob container. Generate a new shared access signature (SAS) allowing read access
  • DCreate a new virtual machine (VM) using the B1S Stock Keeping Unit (SKU). Create a network

How the community answered

(33 responses)
  • A
    6% (2)
  • B
    12% (4)
  • C
    61% (20)
  • D
    21% (7)

Why each option

The most cost-effective and secure way to share confidential read-only files for a short period, accessible from a static IP, is by using Azure Blob Storage with a Shared Access Signature (SAS).

ACreate a new web application and enable the Secure File Transfer Protocol (SFTP) feature.

Creating a new web application with SFTP is overkill and more expensive than Azure Blob Storage for simple read-only file sharing with specific access controls.

BCreate a new virtual machine (VM) using the B1S Stock Keeping Unit (SKU). Create a network

A virtual machine is an expensive and complex solution for merely providing read-only access to files, especially when simpler storage services are available.

CCreate a blob container. Generate a new shared access signature (SAS) allowing read accessCorrect

Azure Blob Storage is a highly scalable and cost-effective solution for storing unstructured data like files. Generating a Shared Access Signature (SAS) token for the blob container allows granular control, enabling read-only access for a specified time period and restricting access to a specific static IP address, aligning with all security and cost requirements.

DCreate a new virtual machine (VM) using the B1S Stock Keeping Unit (SKU). Create a network

Using a virtual machine is not cost-effective or the simplest solution for providing read-only file access with specific IP restrictions and time limits.

Concept tested: Secure, time-limited, IP-restricted file sharing with Azure Blob SAS

Source: https://learn.microsoft.com/en-us/azure/storage/common/storage-sas-overview

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice