Shared Access Signatures · AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security
A solution must grant temporary access to both a blob container and an Azure Queue Storage queue by using one SAS. The application uses Microsoft Ent…
Practice question from Shared Access Signatures (AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security), with the correct answer and a step-by-step solution.
medium · MCQ · Q-499BA6
A solution must grant temporary access to both a blob container and an Azure Queue Storage queue by using one SAS. The application uses Microsoft Entra ID and is not allowed to store or access a storage account key. What is the correct conclusion?
- A.Use a user delegation SAS because it can authorize Blob Storage and Queue Storage.
- B.Use an account SAS generated with Microsoft Entra ID because account SAS tokens do not require an account key.
- C.The requirements cannot be met with one SAS; user delegation SAS is for Blob Storage, while account or service SAS requires an account key.Correct answer
- D.Use a service SAS signed with the application's Microsoft Entra access token.
Solution
A user delegation SAS is signed with a user delegation key and supports Blob Storage, but not Queue Storage. Account SAS can span services, and service SAS can authorize a supported storage service, but both are signed with a storage account key. Therefore, one SAS cannot satisfy all the stated constraints.
More from Shared Access Signatures
- An ASP.NET Core application must let a client download one specific blob for 15 minutes. The application already uses the storage account k…
- A company distributes service SAS tokens for blobs in a container. The tokens reference a stored access policy. A token is leaked, and the…
- A security-sensitive web API must issue a read-only SAS for one blob, but the API must not store or access a storage account key. The API r…
- An API must allow a client to upload one newly created block blob for 20 minutes. The client must not be able to read, delete, or list blob…
Practise more Implement Azure Security
Sign up free for adaptive practice on this chapter, with instant feedback and hints on every question.
Start practising freeFree to start · No credit card needed