Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Administrator Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Answer: D. a shared access signature (SAS) Because SAS tokens support blob index tag filtering, you can generate tokens scoped to specific blobs based on tags, controlling user access precisely as required.
Answer is: A "The benefits of using role assignment conditions are: Enable finer-grained access to resources - For example, if you want to grant a user read access to blobs in your storage accounts only if the blobs are tagged as Project=Sierra, you can use conditions on the read action using tags as an attribute." Ref: https://learn.microsoft.com/en-us/azure/storage/blobs/storage-auth-abac
D. a shared access signature (SAS) If your blobs are tagged and you need users to access only certain tags, you create a SAS that includes conditions related to those tags. When the user attempts to access, they match the SAS signature constraints, effectively only viewing blobs with the permitted tags. On the other hand, Role assignment conditions might offer control at a broader scope and not as precisely at the blob level based on index tags.