Correct Answer: Azure Storage with 'Microsoft Entra RBAC' and 'Access Reviews' or PIM for sensitive roles
Using Entra RBAC for storage allows you to apply PIM (Just-In-Time access) and Access Reviews, which provide the necessary governance and auditing....
Correct Answer
Azure Storage with 'Microsoft Entra RBAC' and 'Access Reviews' or PIM for sensitive roles
Why This Answer Is Correct
Using Entra RBAC for storage allows you to apply PIM (Just-In-Time access) and Access Reviews, which provide the necessary governance and auditing.
This question evaluates your knowledge of Azure Blob Storage — a core concept tested in Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Understanding Azure Blob Storage is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?
You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?
You are designing a data storage strategy for a massive data lake. You need a solution that supports hierarchical namespaces (directories) for high-performance analytics and integrates with Azure Active Directory for fine-grained access control. Which storage option fits?
Which Azure storage feature allows you to automatically move older, infrequently accessed data from the 'Hot' tier to the 'Cool' or 'Archive' tiers based on its age to save costs?
How can you securely provide access to an Azure storage account for a 3rd-party user for a specific period of time (e.g., 2 hours) without sharing the storage account key or creating an Azure AD account for them?