Question

Difficulty: EasyMove and Copy Blobs between Azure Storage Containers and Accounts

You need to copy several files from a source blob container in one Azure Storage account to a destination blob container in a different Azure Storage account using the AzCopy command-line tool. Which two of the following security and access configuration steps are required to perform this copy operation? (Select two.)

  1. A Shared Access Signature (SAS) token for the source container that includes Read and List permissions.Answer
  2. A Shared Access Signature (SAS) token for the destination container that includes Write and Add permissions.Answer
  3. C
    A Shared Access Signature (SAS) token for the source container that contains only Write permissions.
  4. D
    An active blob lease acquired on the source container to lock the files during the transfer.

Answer

To perform the copy operation, you need a SAS token for the source container with Read and List permissions, and a SAS token for the destination container with Write and Add permissions.
For the copy operation to succeed, the source SAS token must provide Read and List permissions so the tool can identify and download the files, and the destination SAS token must provide Write and Add permissions to allow the creation and population of new blobs in the destination container.

Step-by-Step Solution

1
Configure permissions for the source storage resource.
Generate a SAS token for the source container with Read and List permissions.
AzCopy must be able to read the blob data and list the container contents to locate the files to transfer.
2
Configure permissions for the destination storage resource.
Generate a SAS token for the destination container with Write and Add permissions.
AzCopy must have permissions to write new blobs and append data to the destination container.

Key Concept

Authorizing data movement between Azure Storage containers using Shared Access Signatures (SAS).
Rate this question