Implement security for storage accounts
10 practice questions under this official exam objective (SC-500), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
10 total · page 1 of 1How Should App1 Access Azure Files Without Storage Account Keys?
Azure Files data-plane access for a managed identity is granted through an Azure RBAC role assignment, not by disabling shared key access. The page co
Does adding VM1 and VM2 to a storage1 role meet the goal?
This SC-500 scenario tests whether adding VM1 and VM2 directly to a role on storage1 grants access through their system-assigned managed identities. I
Triggering Automated Responses from Defender for Storage
This question tests how to trigger automated serverless workflows based on Microsoft Defender for Storage malware scan results. The correct solution u
Can VM Security Group Membership Grant Storage Access?
The scenario tests whether Azure VM objects can be added to a security group to grant their system-assigned managed identities access to storage1. It
Azure Blob Storage Access Policy and Immutability Limits
This page explains the limits for Azure Blob Storage stored access policies (max 5 per container) and immutable time-based retention policies (max 1 p
Azure Storage SAS and RBAC Access Control
This scenario tests the intersection of Azure RBAC roles, storage account policies, and Shared Access Signature (SAS) constraints. It establishes that
Can a shared user-assigned identity let VM1 and VM2 access storage1?
This SC-500 scenario asks whether assigning a shared user-assigned managed identity to VM1 and VM2, then granting that identity an RBAC role on storag
How Should storage2 Encrypt Azure Table Data with Fabrikam-Managed Keys?
Azure Table storage requires account-level customer-managed key encryption, while encryption scopes do not cover table data. The page establishes that
Enabling Entra Auth for Storage via Security Group RBAC
This SC-500 question tests whether you can correctly use Microsoft Entra security groups to assign Storage Blob Data Contributor roles to system-assig
How Do You Grant a Functions Managed Identity Blob Read/Write/Delete Access?
Granting an Azure Functions managed identity read, write, and delete access to container1 requires a data-plane Azure RBAC role scoped to the containe