Shared Access Signatures · AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security
A company distributes service SAS tokens for blobs in a container. The tokens reference a stored access policy. A token is leaked, and the security t…
Practice question from Shared Access Signatures (AZ-204: Developing Solutions for Microsoft Azure Implement Azure Security), with the correct answer and a step-by-step solution.
medium · MCQ · Q-7D8622
A company distributes service SAS tokens for blobs in a container. The tokens reference a stored access policy. A token is leaked, and the security team wants to invalidate all tokens that use that policy without rotating the storage account keys or changing access for unrelated SAS tokens. What should the team do?
- A.Delete or modify the stored access policy referenced by the SAS tokens.Correct answer
- B.Change the container's public access level to Blob.
- C.Regenerate both storage account access keys.
- D.Change the IP address restriction in each token's URL without generating new tokens.
Solution
A service SAS that references a stored access policy inherits its effective permissions and validity from that policy. Deleting or changing the policy can revoke or restrict all associated SAS tokens. Rotating account keys is broader and affects SAS tokens signed with the rotated key.
More from Shared Access Signatures
- An ASP.NET Core application must let a client download one specific blob for 15 minutes. The application already uses the storage account k…
- A security-sensitive web API must issue a read-only SAS for one blob, but the API must not store or access a storage account key. The API r…
- An API must allow a client to upload one newly created block blob for 20 minutes. The client must not be able to read, delete, or list blob…
- A solution must grant temporary access to both a blob container and an Azure Queue Storage queue by using one SAS. The application uses Mic…
Practise more Implement Azure Security
Sign up free for adaptive practice on this chapter, with instant feedback and hints on every question.
Start practising freeFree to start · No credit card needed