StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Identity and access

Practice question 62 of 400 · medium

A user has Azure Reader on a storage account and can see its settings but cannot read blobs. Which recommendation meets read-only blob access?

Choose the single best answer.

  1. A.Require stronger MFA while retaining only the existing management Reader permission.
  2. B.Add a second management Reader assignment and rely on additive RBAC to supply blob reads.
  3. C.Grant Contributor so the user can retrieve account keys instead of using least-privilege data reads.
  4. D.Grant an appropriate blob data-read role at the smallest suitable scope.
Show the answer and explanation

✓ Correct answer

  • Grant an appropriate blob data-read role at the smallest suitable scope.

A role such as Storage Blob Data Reader grants the required data operation. Repeating management Reader adds no blob permission. Contributor may permit broader management or indirect data access but is excessive for this read-only requirement. MFA improves sign-in assurance rather than granting blob rights. Source: AZ-305 Study Guide.pdf, PDF page(s) 15-16.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.