Storage Security Quiz

What you'll be asked

1. Which of the following is the most secure way to authorize access to Azure Blob Storage for an application running on an Azure Virtual Machine?
2. You need to provide a temporary, time-limited access to a specific blob for an external partner without sharing your storage account keys. What should you use?
3. Which feature should you enable to ensure that all data written to an Azure Storage account is automatically encrypted at rest using Microsoft-managed keys?
4. You want to ensure that your storage account is only accessible from your corporate network. Which feature should you configure?
5. You have a requirement to ensure that no one, including administrators, can delete or modify blob data for a period of one year. Which configuration should be applied?

Answers and explanations come after you submit.