Microsoft
SC-300 · Question #425
Hotspot Question You have an Azure subscription named Sub1 that contains two storage accounts named storage1 and storage2 and the blob containers shown in the following table. Sub1 contains the users
Sign in or unlock SC-300 to reveal the answer and full explanation for question #425. The question stem and answer options stay visible for context.
Submitted by wei.xz· Mar 6, 2026Manage identities and governance in Azure - specifically configuring role-based access control (RBAC) with attribute-based conditions (ABAC) for Azure Storage, covering how conditional expressions on role assignments restrict or permit access to blob resources based on resource attributes or blob index tags.
Question
Hotspot Question You have an Azure subscription named Sub1 that contains two storage accounts named storage1 and storage2 and the blob containers shown in the following table. Sub1 contains the users shown in the following table. Condition1 has the following definition: NOTE: Each correct selection is worth one point. Answer:
Exhibits
Answer Area
- User1 can read the contents of blob3.
- User1 can read the contents of blob2.
- User2 can read the contents of blob1.
Unlock SC-300 to see the answer
You've previewed enough free SC-300 questions. Unlock SC-300 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Azure RBAC#Attribute-Based Access Control (ABAC)#Azure Blob Storage#Conditional Role Assignments