You have an Azure subscription. The subscription has a blob container that contains multiple blobs.
Ten users in the finance department of your company plan to access the blobs during the month of April.
You need to recommend a solution to enable access to the blobs during the month of April only.
Which security solution should you include in the recommendation?
Click on the arrows to vote for the correct answer
A. B. C. D.D
https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overviewFor this scenario, the most appropriate solution would be to use Shared Access Signatures (SAS). SAS allows you to grant limited access to resources in your storage account. SAS provides a secure way to share your data without giving away your account keys.
Option A: Access Keys: Access keys are used to authenticate with the storage account, and are used to grant permissions to the entire storage account. This means that if the users in the finance department are given access keys, they will have access to the entire storage account, which is not appropriate for this scenario.
Option B: Conditional Access Policies: Conditional access policies are used to enforce organizational policies that determine the conditions under which users are allowed to access Azure resources. While this is a useful feature, it is not applicable to this scenario since it is not a security solution to enable access to blobs during a specific month.
Option C: Certificates: Certificates can be used to authenticate and encrypt communications between two parties. However, certificates alone do not provide granular access control over resources in a storage account.
Option D: Shared Access Signatures (SAS): Shared Access Signatures (SAS) provides a secure way to share your data without giving away your account keys. SAS allows you to grant limited access to resources in your storage account, including specific blobs, for a defined period of time. This is the most appropriate solution for this scenario as it allows the users in the finance department to access the blobs during the month of April only, without giving them access to the entire storage account.
Therefore, the recommended solution for this scenario would be to use Shared Access Signatures (SAS) to grant access to the specific blobs during the month of April.