az-104 Practice Question 1709
Exam: az-104
Domain: Implement and manage storage
Topic: Configure access to storage
Difficulty: medium
Contoso Ltd is facing permission bottlenecks in their Azure Blob Storage, where multiple teams need different levels of access to the same container. They want to manage access control efficiently without managing individual SAS tokens for each team member. What is the best approach, and how does it work?
Answer Options
A
Use Shared Access Signatures (SAS) for each team member.
B
Implement Storage Firewall to restrict access by IP address.
C
Use Stored Access Policies to define and assign permissions to users or groups.
D
Create separate storage accounts for each team and manage access individually.
Correct Answer
C: Use Stored Access Policies to define and assign permissions to users or groups.
Explanation
The correct answer is to use Stored Access Policies. Stored Access Policies allow you to define and assign permissions to specific users or groups at the container level, providing a centralized way to manage access control. This method avoids the need to manage individual SAS tokens for each team member. Other options like Shared Access Signatures (SAS) are suitable for temporary access, and Storage Firewall controls IP-level access rather than user-level access. Shared Access Signatures provide temporary access with specific permissions, and Storage Firewall applies to IP-level access control.