Microsoft Azure Administrator Associate AZ-104 Practice Question

Using Shared Access Signatures (SAS) allows you to grant limited and specific access to storage account resources without exposing the account keys. SAS provides fine-grained control over permissions and duration of access, reducing the risk associated with key exposure and following security best practices. Storing account keys in Azure Key Vault and retrieving them in applications still involves using the account keys directly, which can increase risk if an application is compromised. Regularly regenerating keys and distributing them to applications can cause disruptions and does not eliminate the risk of key exposure. Disabling one of the keys reduces redundancy and can make key rotation difficult without addressing the underlying issue of key exposure.