Q12 RBAC Domain 4 · 20–25% of exam Priority · Real Exam

An application must read blobs from a storage account using its managed identity. Which role is correct?

  1. A Reader
  2. B Storage Blob Data Reader (correct answer)
  3. C Storage Account Contributor
  4. D Contributor

Shortcut: Data-plane access to blob contents requires a data role. Reader and Contributor are management-plane roles that grant no ability to read blob data.