Câu 19: SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads

You have an Azure Storage account named storage1 that contains Azure Files shares. You have an application named App1 that uses a system-assigned managed identity to access the shares. Administrators access the shares by using storage account keys. You need to ensure that App1 access the shares without using the storage account keys. What should you do on storage1?

1. A. Store the storage account access keys in Azure Key Vault and regenerate them periodically.
2. B. Set Allow storage account key access to Disabled.
3. C. Select Default to Microsoft Entra authorization in the Azure portal.
4. D. Assign the Storage File Data Privileged Reader role to the managed identity of App1. — đáp án hiện tại