Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Administrator Associate · Microsoft
Interactive Drag & Drop Matching
Drag each configuration to its target, or tap an option then tap a target slot.
Hotspot Solution:
Box 1: Access Control (IAM) Since the App1 uses Managed Identity, App1 can access the Storage Account via IAM. As per requirement, we need to minimize the number of secrets used, so Access keys is not ideal. Box 2: Shared access signatures (SAS) We need temp access for App2, so we need to use SAS. A shared access signature (SAS) provides secure delegated access to resources in your storage account without compromising the security of your data. With a SAS, you have granular control over how a client can access your data. You can control what resources the client may access, what permissions they have on those resources, and how long the SAS is valid, among other parameters. Reference:
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Box 1: Access Control (IAM) Since the App1 uses Managed Identity, App1 can access the Storage Account via IAM. As per requirement, we need to minimize the number of secrets used, so Access keys is not ideal. Box 2: Shared access signatures (SAS) We need temp access for App2, so we need to use SAS. A shared access signature (SAS) provides secure delegated access to resources in your storage account without compromising the security of your data. With a SAS, you have granular control over how a client can access your data. You can control what resources the client may access, what permissions they have on those resources, and how long the SAS is valid, among other parameters. Reference: https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview https://docs.microsoft.com/en-us/azure/storage/common/storage-auth
Correct Answer: BOX 1:Access Conntrol(IAM) pp1 has a managed identity, and you can assign a Storage Blob Data Reader role to the managed identity of App1 in the access control (IAM) settings for storage1. This approach eliminates the need for secrets and allows App1 to read blobs securely Box 2: Shared access siganture(SAS) Use a Shared access signature (SAS). This allows you to create a time-limited access token that grants read permissions to App2 for the next 30 days.
App1: Access control (IAM) App2: Shared access signatures (SAS)