Question:
Which of the following best practices provides the most flexible and secure way to use a service or account shared access signature (SAS)?
Answer:
The most flexible and secure way to use a service or account SAS is to associate the SAS tokens with a stored access policy.
A user delegation SAS is the most secure SAS, but isn't highly flexible because you must use Microsoft Entra ID to manage credentials.
Using HTTPS prevents man-in-the-middle attacks but isn't the most flexible and secure practice.