Microsoft Exam DP-201 Topic 1 Question 38 Discussion

You can enable anonymous, public read access to a container and its blobs in Azure Blob storage. By doing so, you can grant read-only access to these resources without sharing your account key, and without requiring a shared access signature (SAS).

Public read access is best for scenarios where you want certain blobs to always be available for anonymous read access.

References:

https://docs.microsoft.com/en-us/azure/storage/blobs/storage-manage-access-to-resources