Home › Azure AZ-104 › cloudcomputing › az104storage › Which Azure feature lets you grant temporary, sc…
Which Azure feature lets you grant temporary, scoped access to a Blob URL (e.g. download for 1 hour) without sharing the storage account key?
AShared Access Signature (SAS)
BDNS A record alias
CRBAC at the management group scope
DPublic bucket policy
Answer & Solution
Correct answer: A. Shared Access Signature (SAS)
SAS tokens are time-bound, action-scoped URL signatures over the storage account. Public bucket policies expose data permanently; RBAC governs Azure-level access, not URL-time-bound access; DNS records don't gate storage.
Related questions
Which lifecycle management feature in Azure Blob Storage automatically tiers down infrequeWhich combination of features encrypts a storage account at rest using customer-managed keAn organisation needs immutable storage that satisfies financial regulatory requirements (Which Azure storage feature lets multiple users see the SAME file changes in near-real-timAn organisation has 500 TB of data to upload to Azure but only 100 Mbps of internet. WhichWhich Azure tool synchronises files between an on-premises Windows server and an Azure FilWhich Azure storage type is designed for high-IOPS workloads (e.g. SQL Server log files) aWhich Azure storage replication option keeps 6 copies of data — 3 in the primary region an