A company has a storage account with a container that is accessed by both internal applications (using Azure AD) and external partners (using SAS tokens). The security team wants to revoke access for a specific partner immediately without affecting internal applications. What should they do?

Delete the stored access policy associated with the partner's SAS token.

Regenerate the storage account keys.

Remove the partner's IP address from the storage account firewall.

Change the container's access level to private.

A company uses Azure Blob Storage to store financial records that must be retained for seven years and cannot be modified or deleted during that period. You need to ensure the blobs are protected from accidental or malicious deletion and modification. What should you do?

Create a backup policy that retains backups for seven years.

Enable versioning and configure a lifecycle management policy to keep versions for seven years.

Enable soft delete for blobs and configure a retention period of seven years.

Configure an immutability policy with a retention period of seven years on the container.

A Windows-based application needs to access an Azure Files share using the SMB protocol. Which authentication method is supported for SMB access to Azure Files?

Shared access signature (SAS) tokens

Azure Active Directory (Azure AD) Domain Services

A company has a storage account used by multiple applications. Some applications use account keys, and others use Azure AD authentication. The security team wants to rotate the account keys every 60 days. They also want to ensure that applications using Azure AD are not affected. What should they do?

Rotate the primary key, update applications using keys to use the secondary key, then rotate the secondary key.

Disable shared key access and force all applications to use Azure AD.

Create a new storage account and migrate all applications to it.

Regenerate both keys at the same time to ensure all key-based apps update immediately.

Microsoft Certified:Azure Security Engineer Associate

Domain 3Objective 2

Plan and Implement Security for Storage AZ-500 Practice Questions (Page 7)

Part of the Secure compute, storage, and databases domain, which accounts for 20–25% of the AZ-500 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 3–5 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

7concepts

20–25%of the exam

Questions 31–35

31expert · medium
A company has a storage account with a container that is accessed by both internal applications (using Azure AD) and external partners (using SAS tokens). The security team wants to revoke access for a specific partner immediately without affecting internal applications. What should they do?
Select an answer first
32application · medium
A company uses Azure Blob Storage to store financial records that must be retained for seven years and cannot be modified or deleted during that period. You need to ensure the blobs are protected from accidental or malicious deletion and modification. What should you do?
Select an answer first
33foundation · easy
Which Azure Storage feature protects against accidental deletion of blobs by retaining deleted blobs for a specified period, allowing them to be restored?
Select an answer first
34foundation · easy
A Windows-based application needs to access an Azure Files share using the SMB protocol. Which authentication method is supported for SMB access to Azure Files?
Select an answer first
35expert · medium
A company has a storage account used by multiple applications. Some applications use account keys, and others use Azure AD authentication. The security team wants to rotate the account keys every 60 days. They also want to ensure that applications using Azure AD are not affected. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-500

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-500” is a trademark of its owner, used for identification only.

Plan and Implement Security for Storage AZ-500 Practice Questions (Page 7)

Questions 31–35

A company has a storage account with a container that is accessed by both internal applications (using Azure AD) and external partners (using SAS tokens). The security team wants to revoke access for a specific partner immediately without affecting internal applications. What should they do?

A company uses Azure Blob Storage to store financial records that must be retained for seven years and cannot be modified or deleted during that period. You need to ensure the blobs are protected from accidental or malicious deletion and modification. What should you do?

Which Azure Storage feature protects against accidental deletion of blobs by retaining deleted blobs for a specified period, allowing them to be restored?

A Windows-based application needs to access an Azure Files share using the SMB protocol. Which authentication method is supported for SMB access to Azure Files?

Keep studying — Secure compute, storage, and databases