DP-203 · Question #239
You have an Azure subscription linked to an Azure Active Directory (Azure AD) tenant that contains a service principal named ServicePrincipal1. The subscription contains an Azure Data Lake Storage…
The correct answer is C. Access - Execute D. Default - Read. C - You need to traverse the Folder2 only and no potential children folders - Principals of least D - You need to pass on the READ access to the files in Folder2. Default ACLs are not passed to files but we are not setting the permission on a file level, we are setting it on…
Question
You have an Azure subscription linked to an Azure Active Directory (Azure AD) tenant that contains a service principal named ServicePrincipal1. The subscription contains an Azure Data Lake Storage account named adls1. Adls1 contains a folder named Folder2 that has a URI of https://adls1.dfs.core.windows.net/container1/Folder1/Folder2/. ServicePrincipal1 has the access control list (ACL) permissions shown in the following table. You need to ensure that ServicePrincipal1 can perform the following actions:
- Traverse child items that are created in Folder2.
- Read files that are created in Folder2.
The solution must use the principle of least privilege. Which two permissions should you grant to ServicePrincipal1 for Folder2? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Exhibit
Options
- AAccess - Read
- BAccess - Write
- CAccess - Execute
- DDefault - Read
- EDefault - Write
- FDefault - Execute
How the community answered
(38 responses)- A3% (1)
- B8% (3)
- C74% (28)
- E13% (5)
- F3% (1)
Explanation
C - You need to traverse the Folder2 only and no potential children folders - Principals of least D - You need to pass on the READ access to the files in Folder2. Default ACLs are not passed to files but we are not setting the permission on a file level, we are setting it on Folder2.
Topics
Community Discussion
No community discussion yet for this question.