Practice Test 1 | Microsoft Azure Security Technologies | AZ-500 | Dumps | Mock Test
A company currently has an Azure subscription in place. They have a storage account named whizlabstore2020 in the Azure subscription. They decide to provide access to the storage account with the use of Shared Access Signatures and Stored Access policies. They create several shared access signatures and provide access to the users to use the file and blob service via these signatures.
They then find that unauthorized users also can use both the file and blob service.
They need to revoke all access to the storage account.
They decide to regenerate the key that was used to generate the shared access signature.
Would this resolve the underlying issue?
A. Yes
B. No
Answer A. yes
SAS or shared access signature is always, created with one of two storage access account Keys. In general, SAS will work until:
- The SAS’s expiration time is reached.
- If you used a stored access policy, the SAS will stop working when the expiration time of the stored access policy is reached. This can happen because the time actually expired, or because the stored access policy’s expiration time was modified to be in the past.
- If you used a stored access policy, and the policy referenced by the SAS is deleted, the SAS would no longer work.
- The account key used to create the SAS is regenerated:
Since in this question, the last option is used, hence answer A is correct
The following diagram will make the thing clearer:
For an example on how to restrict access, one can do so by visiting the below URL-
Comments are closed, but trackbacks and pingbacks are open.