Microsoft Azure Administrator Associate AZ-104 Practice Question

By defining a stored access policy on the blob container, the administrator can create shared access signatures (SAS tokens) that are linked to this policy. This allows centralized management, where permissions can be altered or access can be revoked by modifying or deleting the stored access policy. Setting an expiration on the SAS token itself doesn't provide a way to revoke access before the expiration. Firewalls and network security groups control network-level access but do not provide granular control over SAS tokens.