Answer-first summary for fast verification
Answer: Role assignment conditions provide fine-grained access control, allowing you to add checks for specific object tags.
The correct answer is A: an Azure role assignment condition. This feature allows you to create fine-grained access controls based on specific conditions, such as requiring an object to have a specific tag to be accessible. This makes it the most appropriate solution for restricting user access to specific blobs based on blob index tags. Options B, C, and D do not provide the necessary level of tag-based filtering required for the scenario.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
In an Azure Storage account with 5,000 blobs, how can you restrict user access to only specific blobs based on blob index tags?
A
Role assignment conditions provide fine-grained access control, allowing you to add checks for specific object tags.
B
Stored access policies define access levels for containers or blobs but do not support dynamic tag-based filtering.
C
Just-in-time VM access is irrelevant for blob storage, as it is designed for virtual machine access management.
D
Shared access signatures (SAS) offer temporary, granular permissions on blobs, including conditional access based on index tags.