You deploy a web application to an Azure Cloud Service. The application uses a storage account that contains
a large number of storage objects.
You need to grant clients access to application data for a specified interval of time while minimizing effort.What should you create?
A.
a stored access policy
B.
a service shared access signature
C.
an account shared access signature
D.
a network security group
Explanation:
https://azure.microsoft.com/en-gb/documentation/articles/storage-dotnet-shared-access-signature-part-1/
the key point in this question is “for a specified interval of time ” , so the answer is A ( stored access policy )
1
2
you can specify start/end interval for SAS as well…
0
0
From Microsoft:
A SAS gives you granular control over the type of access you grant to clients who have the SAS, including:
The interval over which the SAS is valid, including the start time and the expiry time.
2
0
The key is the ‘large number of storage objects’ within the storage account. A storage access policy can only be used with a service SAS and a service SAS is limited to one storage service – it fails the test of ‘minimizing effort’.
By contrast, an account SAS delegates access to one or more storage services under a storage account.
5
0