Microsoft Azure Developer Associate AZ-204 Practice Question

You are developing an API that generates temporary download links for a blob stored in the "myfiles" container of an Azure Storage account. The front-end application must receive a link that is valid for at most 10 minutes, must not expose the storage account key, and must automatically stop working if the signed-in Azure AD user loses their Azure RBAC assignment to the storage account. What should the API generate?

  • An account SAS that allows read access to the Blob service and is signed with the account key

  • A stored access policy on the container that grants public read access for 10 minutes

  • A service SAS scoped to the container and signed with the storage account key

  • A user delegation SAS scoped to the blob and signed with the user delegation key

Microsoft Azure Developer Associate AZ-204
Implement Azure security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot