# AZ-104 — Question 909

**Type:** hot_area
**Topics:** azure, storage, security, sas

## Question

HOTSPOT
-

You have an Azure subscription that contains a storage account named storage1. The storage1 account contains blobs in a container named container1.

You plan to share access to storage1.

You need to generate a shared access signature (SAS). The solution must meet the following requirements:

• Ensure that the SAS can only be used to enumerate and download blobs stored in container1.
• Use the principle of least privilege.

Which three settings should you enable? To answer, select the appropriate settings in the answer area.

//IMG//

## Correct Answer

_See scenario._

**Reference:** examtopics_top_comment

---
Source: https://hiexam.net/q/microsoft/AZ-104/909  
Practice (tracked): https://hiexam.net/study/AZ-104/practice