AZ-104 Question 99
Single answerYour company requires that a newly created container in Azure Blob Storage store application logs so that only authorized users within the same Azure subscription can read the data. No anonymous entity should be able to list or view the logs. Which public access level should you configure when creating the container to meet these requirements?
- A
Private (no anonymous access)
- B
Blob (anonymous read access for blobs only)
- C
Container (anonymous read for container and blobs)
- D
Container with a stored access policy
Show answer and explanation
Correct answer: A
Explanation
Setting the container to Private (no anonymous access) blocks any public or anonymous access, allowing only authenticated requests from authorized users. This ensures application logs remain exclusively accessible to users who are properly authenticated within the subscription.
- A. Correct.
This option prevents any anonymous access, ensuring only authorized users within the same subscription can read the stored logs.
- B. Incorrect.
This option allows anonymous users to read individual blobs if they know the blob URL, which does not meet the requirement of preventing any anonymous viewing.
- C. Incorrect.
This option allows anonymous users to list and read all blobs in the container, which violates the requirement for strictly authorized access.
- D. Incorrect.
A stored access policy can define additional permissions, but does not inherently block anonymous access without additional configuration. It’s not the simplest choice for ensuring zero anonymous access.