StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Integrated architecture scenarios · Identity and access · Network design · Object, file, and NoSQL data

Practice question 388 of 400 · medium

A retailer’s app resolves a Blob endpoint to a reachable private IP but receives authorization failures. The app uses a managed identity with no storage data role. What is missing?

Choose the single best answer.

  1. A.Only a management-plane role to configure the storage account
  2. B.Microsoft Graph API permissions in place of Storage data authorization
  3. C.A different private DNS alias without any change to the already working private route
  4. D.Appropriate Blob data authorization for the managed identity
Show the answer and explanation

✓ Correct answer

  • Appropriate Blob data authorization for the managed identity

The managed identity needs appropriate Blob data authorization at the correct scope. Management-plane configuration rights are not an automatic Blob data-role grant. DNS and routing are already working in this scenario; changing an alias does not supply permissions. Microsoft Graph permissions authorize a different API, not access to the blobs. Source guide: PDF page(s) 65.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.