AZ-104: Microsoft Azure Administrator Full Course - Shared Access Signatures - Lab Activity

The video tutorial explains how to use shared access signatures (SAS) in Azure to control access to BLOB storage. It covers setting permissions, configuring time and IP restrictions, and generating SAS tokens. The tutorial demonstrates connecting to Azure Storage Explorer using a SAS URL and tests permissions by attempting file uploads. Initially, only read permissions are granted, resulting in a failed upload. After granting additional permissions, a successful upload is demonstrated, highlighting the importance of SAS for granular access control.

What is the primary purpose of shared access signatures in Azure?

• To permanently delete storage accounts

• To provide granular access control to Azure resources

• To create new Azure subscriptions

• To manage Azure billing

Which service should be selected to grant access only to BLOB storage?

• File

• Table

• BLOB

• Queue

What can be configured to restrict access to specific time periods?

• User roles

• Service level agreements

• Start and expiry date-time settings

• Azure billing cycles

Which protocol is recommended for more restrictive access?

• HTTP

• FTP

• HTTPS

• SMTP

What tool can be used to connect to Azure BLOB storage using a SAS URL?

• Azure DevOps

• Azure Monitor

• Azure CLI

• Azure Storage Explorer

What happens if a developer tries to upload a file without write permissions?

• The file is uploaded successfully

• The request is denied due to insufficient permissions

• The file is deleted automatically

• The file is moved to a temporary folder

What can shared access signatures control besides permissions?

• Azure subscription costs

• Azure network settings

• IP addresses and time range

• Azure virtual machines