Microsoft Azure Administrator Associate AZ-104 Practice Question

By generating shared access signatures (SAS) tied to a stored access policy, you can provide time-limited access to external users and have the ability to revoke their access by modifying or deleting the stored access policy without impacting the storage account keys or other users. Ad-hoc SAS tokens cannot be revoked without regenerating the storage account keys, which can disrupt other services and users relying on those keys. Setting the container's public access level to 'Blob' would make the blobs publicly accessible to anyone, which does not meet the requirement for controlled access. Enabling anonymous access on the storage account is not a supported feature and would not provide the necessary security controls.