Shared Access Signatures · AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security
An API must allow a client to upload one newly created block blob for 20 minutes. The client must not be able to read, delete, or list blobs, and the…
Practice question from Shared Access Signatures (AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security), with the correct answer and a step-by-step solution.
easy · MCQ · Q-086CD9
An API must allow a client to upload one newly created block blob for 20 minutes. The client must not be able to read, delete, or list blobs, and the request must use HTTPS. Which service SAS settings provide the least privilege?
- A.Permissions: cw; signed resource: b; protocol: HTTPSCorrect answer
- B.Permissions: rwdl; signed resource: c; protocol: HTTPS
- C.Permissions: r; signed resource: b; protocol: HTTPS
- D.Permissions: acwl; signed resource: c; protocol: HTTP or HTTPS
Solution
The c permission allows creation of a new blob, and w allows writing its content. The signed resource must be b for a blob, and restricting the protocol to HTTPS protects the request in transit. Read, delete, list, and account-level permissions are unnecessary.
More from Shared Access Signatures
- An ASP.NET Core application must let a client download one specific blob for 15 minutes. The application already uses the storage account k…
- A company distributes service SAS tokens for blobs in a container. The tokens reference a stored access policy. A token is leaked, and the…
- A security-sensitive web API must issue a read-only SAS for one blob, but the API must not store or access a storage account key. The API r…
- A solution must grant temporary access to both a blob container and an Azure Queue Storage queue by using one SAS. The application uses Mic…
Practise more Implement Azure Security
Sign up free for adaptive practice on this chapter, with instant feedback and hints on every question.
Start practising freeFree to start · No credit card needed