Microsoft AZ-204 Exam - Topic 16 Question 53 Discussion

Actual exam question for Microsoft's AZ-204 exam

Question #: 53
Topic #: 16

[All AZ-204 Questions]

You manage a data processing application that receives requests from an Azure Storage queue.

You need to manage access to the queue. You have the following requirements:

Provide other applications access to the Azure queue.

Ensure that you can revoke access to the queue without having to regenerate the storage account keys.

Specify access at the queue level and not at the storage account level.

Which type of shared access signature (SAS) should you use?

AService SAS with a stored access policy

BAccount SAS

CUser Delegation SAS

DService SAS with ad hoc SAS

Show Suggested Answer

Suggested Answer: A

A service SAS is secured with the storage account key. A service SAS delegates access to a resource in only one of the Azure Storage services: Blob storage, Queue storage, Table storage, or Azure Files.

Stored access policies give you the option to revoke permissions for a service SAS without having to regenerate the storage account keys.

https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview

by Gary at May 06, 2022, 04:42 PM

Limited Time Offer

25%

Off

Get Premium AZ-204 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mireya

4 months ago

A is the way to go, it gives you the control you need!

upvoted 0 times

...

Venita

4 months ago

B is not the right option since it’s account-level, not queue-level.

upvoted 0 times

...

Brynn

4 months ago

Wait, can you really revoke access without regenerating keys? Sounds too good to be true.

upvoted 0 times

...

Alba

5 months ago

I agree, A is the best choice for queue-level access!

upvoted 0 times

...

Brittni

5 months ago

Definitely A, the stored access policy is key for revoking access.

upvoted 0 times

...

Dottie

5 months ago

I feel like Account SAS might be too broad for this scenario since we need to specify access just for the queue, but I could be mistaken.

upvoted 0 times

...

Marya

5 months ago

I practiced a similar question where we had to manage access at the queue level, and I think Service SAS is the right choice here.

upvoted 0 times

...

Darell

5 months ago

I'm not entirely sure, but I remember something about User Delegation SAS being more about user permissions rather than queue access specifically.

upvoted 0 times

...

Wenona

5 months ago

I think we need to use a Service SAS with a stored access policy since it allows us to revoke access easily without changing the storage account keys.

upvoted 0 times

...

Tamra

5 months ago

I'm a bit unsure about this one. I know VRRP is used for virtual IP addressing, but I'm not sure about the other options. I'll have to review my notes on high availability configurations to make the best guess.

upvoted 0 times

...

Dallas

5 months ago

Hmm, this seems like a tricky one. I'll need to carefully review the HA configuration details to determine the best solution.

upvoted 0 times

...