Cloud · Microsoft Azure · Certifications
AZ-500: Temporary access to a blob
Select one answer. Your result and the explanation will appear immediately.
Question 11
You need to provide a user with temporary access to a specific blob in Azure Blob Storage, ensuring the access automatically expires after six days. Which method should you use to grant this time-limited access?
Correct answer: A shared access signature (SAS) with a six-day expiry time.
A SAS can grant narrowly scoped permissions to a single blob and includes an explicit expiry time. Setting the expiry to six days makes the access stop automatically at the required time.
Exam clue: The key requirements are access to a specific blob and automatic expiration after a defined period. These are core SAS capabilities.
Remember: Use a SAS for delegated, time-limited access to Storage resources. RBAC and managed identities are identity-based authorization mechanisms and do not inherently provide an expiry at the individual access-grant level.