AZ-104 Question 97
Single answerYou need to create a new container in an existing Azure Storage account to store publicly accessible video files for read operations only. Which action ensures that the container is publicly accessible for read operations only using the Azure portal?
- A
Set the container’s public access level to Private
- B
Set the container’s public access level to Blob
- C
Enable Soft Delete for the container
- D
Configure a Shared Access Signature (SAS) with read permissions for the container
Show answer and explanation
Correct answer: B
Explanation
To allow the public to read the video files without additional keys or tokens, you must set the container’s public access level to Blob. This provides anonymous read access to the blob data while preventing unauthorized write or delete operations.
- A. Incorrect.
Private access level means the container and blob data are not publicly accessible without authorization, so it does not meet the requirement for public read access.
- B. Correct.
Blob access level allows anonymous read access to blob content, which fulfills the requirement for publicly accessible videos while restricting unauthorized write or delete actions.
- C. Incorrect.
Enabling Soft Delete only helps protect against accidental deletions; it does not enable public access for reading the blobs.
- D. Incorrect.
A SAS with read permissions can also grant temporary read access, but it does not inherently configure public access for the container, and requires distribution of the SAS token.