Exam AZ-104 topic 2 question 114 discussion

Actual exam question from Microsoft's AZ-104

Question #: 114
Topic #: 2

You have an Azure subscription that contains a storage account named storage. The storage account contains a blob that stores images.

Client access to storage1 is granted by using a shared access signature (SAS).

You need to ensure that users receive a warning message when they generate a SAS that exceeds a seven-day time period.

What should you do for storage?

A. Enable a read-only lock.
B. Configure an alert rule.
C. Add a lifecycle management rule.
D. Set Allow recommended upper limit for shared access signature (SAS) expiry interval to Enabled.

Show Suggested Answer

Suggested Answer: D 🗳️

by DJHASH786 at Aug. 22, 2024, 7:49 p.m.

Comments

Submit Cancel

Shakka

Highly Voted 10 months, 1 week ago

Selected Answer: D

D Correct Sign in to the Azure portal: Ensure you have the necessary administrative privileges. Navigate to the Storage Account: Go to Storage accounts and select the storage account named storage. Configure the SAS Expiration Policy: In the storage account settings, go to Configuration. Under Shared access signature (SAS) settings, find the SAS expiration policy. Set the Recommended upper limit for SAS expiration to 7 day

upvoted 6 times

Brzzzzz4489

8 months, 3 weeks ago

Question asks how to send a warning email if a condition is met, wouldn't that be an alert regardless of SAS expiration policy?

upvoted 2 times

RPINTO

6 months, 1 week ago

A SAS expiration policy doesn't prevent a user from creating a SAS with an expiration that exceeds the limit recommended by the policy. When a user creates a SAS that violates the policy, they see a warning, along with the recommended maximum interval. If you've configured a diagnostic setting for logging with Azure Monitor, then Azure Storage writes a message to the 'SasExpiryStatus' property in the logs whenever a user uses a SAS that expires after the recommended interval; the message indicates that the validity interval of the SAS exceeds the recommended interval. > https://learn.microsoft.com/en-us/azure/storage/common/sas-expiration-policy?tabs=azure-portal#:~:text=A%20SAS%20expiration%20policy%20doesn%27t,SAS%20exceeds%20the%20recommended%20interval.

upvoted 2 times

...

58b2872

Most Recent 5 months, 4 weeks ago

Selected Answer: D

To ensure users receive warnings when generating SAS tokens that exceed a 7-day expiry, D. Set Allow recommended upper limit for shared access signature (SAS) expiry interval to Enabled is the correct choice.

upvoted 2 times

...