You have an Azure Machine Learning workspace. You are connecting an Azure Data Lake Storage Gen2 account to the workspace as a data store. You need to authorize access from the workspace to the…

The correct answer is A. Service principal. A service principal is the correct authorization method to use when connecting an Azure Data Lake Storage Gen2 account to an Azure Machine Learning workspace as a datastore. A service principal is an Azure Active Directory application identity that can be granted fine-grained…

Design and prepare a machine learning solution

Question

You have an Azure Machine Learning workspace. You are connecting an Azure Data Lake Storage Gen2 account to the workspace as a data store. You need to authorize access from the workspace to the Azure Data Lake Storage Gen2 account. What should you use?

Options

AService principal
BSAS token
CManaged identity
DAccount key

How the community answered

(34 responses)

A
71% (24)
B
6% (2)
C
15% (5)
D
9% (3)

Explanation

A service principal is the correct authorization method to use when connecting an Azure Data Lake Storage Gen2 account to an Azure Machine Learning workspace as a datastore. A service principal is an Azure Active Directory application identity that can be granted fine-grained RBAC permissions (such as 'Storage Blob Data Contributor') on the ADLS Gen2 account. This provides secure, credential-based access suitable for automated workflows. Account keys grant broad access without RBAC scoping. SAS tokens are time-limited and less suitable for persistent datastore connections. While managed identity is also a valid option in some configurations, service principal is the standard recommended identity-based method for this scenario in the exam context.

Topics

#Azure ML Datastores#ADLS Gen2#Authentication#Service Principal

Community Discussion

No community discussion yet for this question.

Full DP-100 Practice