nerdexam
Microsoft

SC-100 · Question #21

Azure subscription that uses Azure Storage. The company plans to share specific blobs with vendors. You need to recommend a solution to provide the vendors with secure access to specific blobs…

The correct answer is A. Create shared access signatures (SAS). A shared access signature (SAS) provides secure delegated access to resources in your storage With a SAS, you have granular control over how a client can access your data. For example: - What resources the client may access. - What permissions they have to those resources…

Design security solutions for applications and data

Question

Azure subscription that uses Azure Storage. The company plans to share specific blobs with vendors. You need to recommend a solution to provide the vendors with secure access to specific blobs without exposing the blobs publicly. The access must be time-Limited. What should you include in the recommendation?

Options

  • ACreate shared access signatures (SAS).
  • BShare the connection string of the access key.
  • CConfigure private link connections.
  • DConfigure encryption by using customer-managed keys (CMKs)

How the community answered

(54 responses)
  • A
    72% (39)
  • B
    9% (5)
  • C
    15% (8)
  • D
    4% (2)

Explanation

A shared access signature (SAS) provides secure delegated access to resources in your storage With a SAS, you have granular control over how a client can access your data. For example: - What resources the client may access. - What permissions they have to those resources. - How long the SAS is valid. https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview

Topics

#Azure Storage#Shared Access Signatures (SAS)#Access Control#Data Security

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice