SC-100 Certification Practice Question #202

Question

Your company has an Azure subscription that uses Azure Storage.
The company plans to share specific blobs with vendors.
You need to recommend a solution to provide the vendors with secure access to specific blobs without exposing the blobs publicly. The access must be time- limited.
What should you include in the recommendation?

Accepted Answer

The requirement combines three constraints — secure access to *specific* blobs, *without public exposure*, and *time-limited*. A SAS is the only option that satisfies all three: it is a signed URL that grants restricted, scoped permissions to specific resources for a defined start/expiry interval without making blobs public or sharing the account key. The Private Endpoint argument fails because private endpoints address network isolation for VNet-bound clients and have no expiry mechanism, so they cannot satisfy "time-limited" access for external vendors. Suggested Answer, an overwhelming Most Voted count, the top community comments, and MS Learn all converge on D.

More SC-100 practice questions