SC-100: Microsoft Cybersecurity ArchitectDemo

By Microsoft · Question Mode

QuestionQ34

Design security solutions for applications and data

Your company has an Azure subscription that uses Azure Storage.

The company plans to share particular blobs with vendors. You need to recommend a solution that gives vendors secure access to those specific blobs without making the blobs public. Access must be time-limited.

What should you include in the recommendation?

  • A Configure private link connections.
  • B Configure encryption by using customer-managed keys (CMKs).
  • C Share the connection string of the access key.
  • D Create shared access signatures (SAS).
Explanation

A shared access signature (SAS) provides secure delegated access to specified Azure Storage resources. It can restrict permissions and define the validity interval, allowing vendors to access only the intended blobs for a limited time without public exposure or disclosure of the storage account key.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!