Examkin

Question

Difficulty: EasyManage Storage Access Keys and Shared Access Signatures (SAS)

You need to generate a Shared Access Signature (SAS) token for an Azure Storage account. The access must be restricted to secure connections only and limited to a specific client network range.

Which two settings should you configure when generating the SAS token?

  1. Allowed protocolsAnswer
  2. Allowed IP addressesAnswer
  3. C
    Microsoft Entra ID role assignments
  4. D
    Trusted Microsoft services bypass

Answer

To restrict access to secure connections and a specific client network range, you must configure the Allowed protocols and Allowed IP addresses settings.
The correct parameters to configure are the allowed protocols and the allowed IP addresses. Restricting allowed protocols to HTTPS only enforces secure connections, and setting allowed IP addresses limits traffic to the specified client network range.

Step-by-Step Solution

1
Analyze the security constraints required for the Shared Access Signature (SAS) token.
The requirements are: 1) secure connections only, and 2) a specific client network range.
This helps target the correct configuration settings during token generation.
2
Select the parameter that controls the connection security protocol.
Configure Allowed protocols to require HTTPS only.
Allowed protocols restricts client requests to secure channels.
3
Select the parameter that restricts client requests by source IP address.
Configure Allowed IP addresses with the specific client network range.
Allowed IP addresses ensures only clients from the defined IP range can use the token.

Key Concept

Shared Access Signatures (SAS) allow granular delegation of access using constraints such as protocol validation and source IP address range filters.
Rate this question

Topics

Manage Storage Access Keys and Shared Access Signatures (SAS)

More questions from this topic