Knowledge check

Completed

Your company uses an Azure storage account for storing large numbers of video and audio files. Containers are used to store each type of file and access is limited to those media files. Additionally, the files can only be accessed through shared access signatures.

• The company wants the ability to revoke access to the files and to change the period for which users can access the files.

• The company is planning a delegation model for Azure storage. Applications in the production environment must have unrestricted access to Azure Storage resources.

• You're researching how to use network configuration rules, shared access signatures (SAS), and stored access policies to implement secure access to Azure Storage.

Answer the following questions

Choose the best response for each of the questions below.

1.

Which solution is the easiest way to implement secure storage for the company's media files?

Create a shared access signature (SAS) for each user and delete the SAS to prevent access.

Create stored access policies for each container to enable revocation of access or change of duration.

Periodically regenerate the account key to control access to the files.

2.

What's the default network rule when configuring network access to an Azure storage account?

Allow all connections from all networks.

Allow all connection from a private IP address range.

Deny all connections from all networks.

3.

What's the best way to implement secure access to Azure Storage for the company's users?

Use shared access signatures for the production applications.

Use access keys for the production applications.

Use stored access policies for the production applications.

You must answer all questions before checking your work.