問題文
A user delegation shared access signature was issued to a partner and must be revoked immediately. Which statement correctly describes the options and their consequences?
選択肢
- A user delegation shared access signature cannot be associated with a stored access policy, so revocation is achieved by revoking the user delegation key or the signing principal's access, which affects other signatures signed the same way.
- Deleting the stored access policy associated with the signature revokes it immediately and affects only the signatures bound to that policy, so no other partner is disrupted. The signing principal's own access remains unchanged, so its other work continues, and the partner simply loses the path that was granted through the policy.
- Rotating the storage account keys revokes it immediately, because every shared access signature issued for the account is invalidated when the key that signed it changes.
- It expires only at its stated expiry time and cannot be revoked at all.