BenchMark Quizzes by MDFT Pro

Grant Temporary Permissions to an Application

You work for MDFT Pro, a well-known training agency that provides Microsoft certification courses to students worldwide. Mark, the Application Development Manager, is developing a course materials management application that uses Azure Data Lake Storage Gen 2 to store video lectures, practice exams, and digital textbooks. The application needs to allow external training partners to upload new course content for a limited time period during content review cycles, but Mark doesn’t want to grant long-term access that could pose security risks.

You need to recommend a solution to grant permissions to the partner application for a limited time period, ensuring that access automatically expires after the review cycle is complete.

What should you include in the recommendation?

Choose the correct answer from the options below.

Explanations for each answer:

Role assignments is incorrect. Role assignments provide long-term access control and are not designed for temporary, time-limited permissions.
Account keys is incorrect. Account keys provide full access and cannot be time-limited or scoped to specific applications securely.
Shared access signatures (SAS) is correct. Shared access signatures (SAS) allow you to grant granular, time-limited permissions to specific resources, making them ideal for temporary application access.
Azure Active Directory (Azure AD) identities is incorrect. Azure AD identities provide authentication but don't inherently offer time-limited permissions without additional configuration.

Learn more about shared access signatures:

Shared Access Signatures (SAS)

Practice Exam

Grant Temporary Permissions to an Application

Discuss this question on social media: