Question 20 (4 points)

Alice is an Azure subscription owner for the sales team at ABC inc, a home improvement chain that sells items across lighting, appliances, and thousands of other categories.

Daily sales reports across these categories are stored in an Azure storage container for that day (2021-03-24, for example) so that the central finance team members can easily access the reports. Bob is the Sales Manager for the lighting category and needs to be able to read the sales reports for this category in any storage container, but not other categories.

Describe how Alice can leverage authorization model(s) to restrict access based on storage account and container name ? Note that roles can be assigned at the storage level and specific tags to the categories.

Question 20 options:

Question 21 (4 points)

Employees at a law firm stole the organization's files and deleted emails. Insiders of that firm stole sensitive files for personal gain and with a clear purpose. After their malicious actions, the attorneys double-erased all the emails that could have provided evidence.

What security mecanisms can be used to ensure accountability?

For information security purposes, list the nominal details that need to be captured as well as important considerations