Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Administrator Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
To access blob data with the account access key, you must have an Azure role assigned to you that includes the Azure RBAC action Microsoft.Storage/storageAccounts/listkeys/action. This Azure role can be a built-in or a custom role. The following built-in roles, listed from least to greatest permissions, support Microsoft.Storage/storageAccounts/listkeys/action: Reader and Data Access Storage Account Contributor Azure Resource Manager Contributor Azure Resource Manager Owner From: https://learn.microsoft.com/en-us/azure/storage/blobs/authorize-data-operations-portal?utm_source=chatgpt.com
Is AB because C is allow most privilege
Correct Answers: B. Storage Blob Data Contributor Grants read/write/delete access to blob data. Required to upload files via Azure portal or SDK/CLI. This is the least privileged role needed for uploading blobs. A. Storage Account Contributor Grants management access to the storage account (e.g., configure settings). Not required to upload files directly. Assign only if you want users to manage storage account settings (which violates the principle of least privilege if uploading files is the only requirement). Incorrect Options: C. Reader – Read-only access to resources, not sufficient for file uploads. D. Contributor – Broad permissions over all Azure resources, violates least privilege. E. Storage Blob Data Reader – Grants read-only access to blob data; cannot upload.