az-104 Practice Question 1706
Exam: az-104
Domain: Implement and manage storage
Topic: Configure access to storage
Difficulty: medium
A developer at Contoso Ltd needs to grant read-only access to a specific Azure Blob container for a partner company without sharing the key. How should they configure the access to meet these requirements?
Answer Options
A
Share the storage account key with the partner company.
B
Use Stored Access Policies to set read-only permissions on the container.
C
Generate a Shared Access Signature (SAS) with read permissions for the container.
D
Create a role assignment for the partner company in the Azure portal.
Correct Answer
C: Generate a Shared Access Signature (SAS) with read permissions for the container.
Explanation
The correct answer is to use Shared Access Signatures (SAS). Shared Access Signatures allow you to generate a URL with specific permissions and expiration times, which can be shared with the partner company. This method provides fine-grained access control and does not require sharing the storage account key. Other options like using the storage account key directly would expose sensitive information, and Stored Access Policies apply to all blobs and containers within a storage account, not just specific ones.