AZ-204 Certification Practice Question #144

Question

An organization plans to deploy Azure storage services.
You need to configure shared access signature (SAS) for granting access to Azure Storage.
Which SAS types should you use? To answer, drag the appropriate SAS types to the correct requirements. Each SAS type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Accepted Answer

Microsoft documentation defines exactly three SAS types with distinct scopes: an Account SAS grants access across one or more storage services (Blob, Queue, Table, File); a Service SAS delegates access within a single service; a User Delegation SAS is secured using Azure AD credentials (instead of an account key) and is unique in that regard. These definitions map directly to the three requirements in the question. Community consensus (20+ votes) confirms the provided answer. The note by coffecold about User Delegation being Blob-only is a caveat but does not change the mapping since the question tests the distinguishing characteristic (Azure AD credentials).

More AZ-204 practice questions