Correct Answer: Generate a Service SAS (Shared Access Signature) with Read permission on the specific container, set to expire in 48 hours
A Service SAS provides a time-limited, permission-scoped URL granting access to specific resources. By setting the expiry to 48 hours and limiting permissions to Read on the specif...
Correct Answer
Generate a Service SAS (Shared Access Signature) with Read permission on the specific container, set to expire in 48 hours
Why This Answer Is Correct
A Service SAS provides a time-limited, permission-scoped URL granting access to specific resources. By setting the expiry to 48 hours and limiting permissions to Read on the specific container, the vendor gets exactly the access needed without any Azure credentials, and access automatically revokes after 48 hours.
This question evaluates your knowledge of Storage Security — a core concept tested in Microsoft Certified: Azure Security Engineer Associate (AZ-500). Understanding Storage Security is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.