Microsoft · SC-500
Securing storage
SC-500 · Lesson 5 of 15 · 29:48
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SC-500 exam (Microsoft Certified: Cloud and AI Security Engineer Associate). In this lesson: Microsoft Entra ID and data roles, Shared Key, user delegation SAS and stored access policies, network rules, service endpoints, private endpoints, and Defender for Storage with malware scanning. Includes three original practice questions.
Preview the topics
- A partner needs read access to one container for seven days, and the company must be able to revoke it early, without touching the account keys. What fits?
- Only virtual machines in one subnet may reach a storage account, which can keep its public endpoint. What’s the simplest configuration?
- Customers upload documents to a storage account, and the company must detect malware in every uploaded file, automatically. What should it enable?