Home › Azure AZ-204 › cloudcomputing › az204storage › Which Azure storage feature lets you grant a cli…
Which Azure storage feature lets you grant a client temporary download access to a specific blob without sharing the storage account key?
AA NSG outbound rule
BA public bucket policy
CSharing the storage account access key directly
DA Shared Access Signature (SAS) — service-level or user-delegation
Answer & Solution
Correct answer: D. A Shared Access Signature (SAS) — service-level or user-delegation
SAS tokens are time-bound, scope-bound URL signatures. Public bucket policies expose data; sharing keys leaks long-term credentials; NSGs control network, not signed URLs.
Related questions
An app must encrypt user-uploaded blobs using a key the customer controls, rotates, and auCosmos DB's Change Feed emits document changes in order. Which scenario is its CANONICAL uWhich Azure storage feature lets you fire an Azure Function when a new blob is uploaded?What is the trade-off when using Cosmos DB session consistency (the default)?Which Cosmos DB feature lets a single container handle a sudden 10x traffic burst WITHOUT Which Azure storage feature continuously replicates blobs to a paired region for region-diWhich Cosmos DB concept determines the physical sharding strategy — how documents are distWhat is Cosmos DB's consistency model that guarantees clients see writes in the same globa