Microsoft Azure Developer Associate AZ-204 Practice Question

To satisfy least-privilege policy, the token must grant only the permissions needed to upload files. Write (w) permits creating and overwriting blobs, and Create (c) is optional because Write already covers creation. Listing the container would require the List (l) permission, which must be excluded. The token sp=cw&st=2024-10-15T02:00Z&se=2024-10-15T03:00Z grants only Create and Write and is valid solely during the 02:00-03:00 UTC window. The other tokens either include List (l), grant unnecessary permissions such as Delete (d), or have a much broader validity period, violating the stated security requirements.