You want to create a stored access policy on a container to manage SAS tokens. Which of the following can you define in the stored access policy?

The IP address ranges that are allowed to use the SAS tokens.

The Azure AD roles that can use the SAS tokens.

The start time, expiry time, and permissions for the SAS tokens that reference the policy.

The encryption key used to sign the SAS tokens.

Your company has an Azure Storage account that must be accessible only from a specific subnet in a virtual network. You have already enabled a service endpoint for Microsoft.Storage on the subnet. What else must you do to ensure that only that subnet can access the storage account?

Create a private endpoint for the storage account in the subnet.

Add a virtual network rule to the storage account firewall that allows the subnet.

Set the storage account's network access to 'Disabled' for all networks.

Assign the Storage Blob Data Reader role to the subnet's managed identity.

You have a blob container that is accessed by multiple applications using SAS tokens. You need to change the permissions for one application without affecting the others. What should you do?

Use a single stored access policy for all applications and modify it to change permissions for one application.

Create a separate stored access policy for each application and generate SAS tokens that reference the respective policy.

Regenerate the storage account key to change permissions for one application.

Generate SAS tokens with different permissions and expiries for each application.

Microsoft Certified:Azure Administrator Associate

Domain 2Objective 1

Configure Access to Storage AZ-104 Practice Questions (Page 2)

Part of the Implement and manage storage domain, which accounts for 15–20% of the AZ-104 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 2–4 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

7concepts

15–20%of the exam

Questions 6–10

6foundation · easy
You want to create a stored access policy on a container to manage SAS tokens. Which of the following can you define in the stored access policy?
Select an answer first
7application · medium
Your company has an Azure Storage account that must be accessible only from a specific subnet in a virtual network. You have already enabled a service endpoint for Microsoft.Storage on the subnet. What else must you do to ensure that only that subnet can access the storage account?
Select an answer first
8application · medium
You have a blob container that is accessed by multiple applications using SAS tokens. You need to change the permissions for one application without affecting the others. What should you do?
Select an answer first
9foundation · easy
Where can you view and manage the access keys for an Azure Storage account in the Azure portal?
Select an answer first
10foundation · easy
You need to restrict access to an Azure Storage account so that only requests from a specific public IP range are allowed. Which blade in the Azure portal should you use to configure this restriction?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-104

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-104” is a trademark of its owner, used for identification only.

Configure Access to Storage AZ-104 Practice Questions (Page 2)

Questions 6–10

You want to create a stored access policy on a container to manage SAS tokens. Which of the following can you define in the stored access policy?

Your company has an Azure Storage account that must be accessible only from a specific subnet in a virtual network. You have already enabled a service endpoint for Microsoft.Storage on the subnet. What else must you do to ensure that only that subnet can access the storage account?

You have a blob container that is accessed by multiple applications using SAS tokens. You need to change the permissions for one application without affecting the others. What should you do?

Where can you view and manage the access keys for an Azure Storage account in the Azure portal?

You need to restrict access to an Azure Storage account so that only requests from a specific public IP range are allowed. Which blade in the Azure portal should you use to configure this restriction?

Keep studying — Implement and manage storage