Microsoft Azure Developer Associate AZ-204 Practice Question
You are developing an API that generates temporary download links for a blob stored in the "myfiles" container of an Azure Storage account. The front-end application must receive a link that is valid for at most 10 minutes, must not expose the storage account key, and must automatically stop working if the signed-in Azure AD user loses their Azure RBAC assignment to the storage account. What should the API generate?
An account SAS that allows read access to the Blob service and is signed with the account key
A stored access policy on the container that grants public read access for 10 minutes
A service SAS scoped to the container and signed with the storage account key
A user delegation SAS scoped to the blob and signed with the user delegation key
A user delegation SAS is signed with a user delegation key that your back-end obtains from Azure Storage after the caller authenticates with Azure AD. Because the signature is based on Azure AD credentials, the operation does not require the storage account key and the link becomes invalid when the user's RBAC assignment or the delegation key is revoked. A service SAS or account SAS are signed with the account key, so they continue to work even if the user loses Azure RBAC access and expose the key on the server. A stored access policy merely groups service SAS settings and cannot satisfy the requirement to avoid account keys or track individual users.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a user delegation SAS?
Open an interactive chat with Bash
How does Azure Active Directory (Azure AD) work with user delegation SAS?
Open an interactive chat with Bash
Why are service SAS and account SAS not suitable in this scenario?
Open an interactive chat with Bash
Microsoft Azure Developer Associate AZ-204
Implement Azure security
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .