Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Administrator Associate · Microsoft
Step Sequence / Reordering Question
Add and arrange the steps in the correct execution order.
Hotspot Solution:
key1: Full access to all services of the storage account. RBAC are considered only if you use an access using managed identity. The key give full access to everyone that known it. So it's a best practice to rotate keys frequently. SAS is more secure than give key, because it give limited access for limited time SAS: only table1, that is the only service checked.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Agreed Key1: Table1,folder1 and container1 You cannot use Azure RBAC to disallow someone from writing to a blob if they have the storage account access key. The access key provides full access to the storage account, overriding any RBAC permissions SAS1: Table1 only SAS ha indicated only services allowed Table
SAS Configuration: Allowed Services: Defines the type of Azure Storage service the SAS can access (e.g., Blob, File, Queue, Table). Allowed Resource Types: Specifies the scope of access within the allowed services (e.g., Service, Container, Object). Allowed Permissions: Determines the actions that can be performed (e.g., Read, Write, Delete).
key1: Full access to all services of the storage account. RBAC are considered only if you use an access using managed identity. The key give full access to everyone that known it. So it's a best practice to rotate keys frequently. SAS is more secure than give key, because it give limited access for limited time SAS: only table1, that is the only service checked.