Correct Answer: Generate a Shared Access Signature (SAS) token scoped to the blob with 2-hour expiry
A Shared Access Signature (SAS) grants time-limited, scoped access to a specific storage resource. A Service SAS scoped to a single blob with a 2-hour expiry lets the vendor read o...
Correct Answer
Generate a Shared Access Signature (SAS) token scoped to the blob with 2-hour expiry
Why This Answer Is Correct
A Shared Access Signature (SAS) grants time-limited, scoped access to a specific storage resource. A Service SAS scoped to a single blob with a 2-hour expiry lets the vendor read only that blob without needing the account key or an Azure AD account.
This question evaluates your knowledge of Azure Blob Storage — a core concept tested in Microsoft Certified: Azure Developer Associate (AZ-204). Understanding Azure Blob Storage is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?
You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?
An administrator needs to store video files that are rarely accessed but must be available immediately when requested. Which Azure Blob Storage access tier should be used to minimize costs?
What is 'Lifecycle Management' in Azure Blob Storage used for?
Which Azure storage redundancy option provides protection against the failure of an entire data center by replicating data to three different facilities within a single region?