StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Data classification encryption databases and storage

Practice question 475 of 498 · easy

An Azure-hosted reporting service must read one Blob container without stored account keys. Which design should be selected?

Choose the single best answer.

  1. A.A managed identity with an appropriate scoped Blob data role
  2. B.An unlimited account SAS in the repository
  3. C.A subscription Owner role as the only data design
  4. D.A public anonymous container
Show the answer and explanation

✓ Correct answer

  • A managed identity with an appropriate scoped Blob data role

Managed identity and a scoped data role provide secretless authorized access. Anonymous access removes the protection boundary, Owner is overly broad and not a substitute for a carefully scoped data design, and repository SAS storage exposes a bearer credential.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.