StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Data classification encryption databases and storage

Practice question 476 of 498 · medium

A supplier needs temporary access to a supported storage resource using a SAS. Which configuration best matches least privilege?

Choose the single best answer.

  1. A.Use an indefinite token because the supplier is trusted
  2. B.Only required resource scope and permissions, short validity, HTTPS, and appropriate revocation planning
  3. C.Account-wide full control with no planned expiry
  4. D.Write the full SAS URL in public logs
Show the answer and explanation

✓ Correct answer

  • Only required resource scope and permissions, short validity, HTTPS, and appropriate revocation planning

Narrow scope, permissions, expiry, and secure transport limit token exposure. Broad indefinite access and public token logs increase misuse risk even for a trusted supplier.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.