DP-203 · Question #298
Drag and Drop Question You have an Azure Data Lake Storage Gen 2 account named storage1. You need to recommend a solution for accessing the content in storage1. The solution must meet the following…
The correct answer is Role-based access control (RBAC) roles; Access control lists (ACLs). RBAC roles are the correct choice for granting permissions at the storage account level using Azure AD security principals, as they allow broad permissions (like Storage Blob Data Reader) to be assigned across the entire account. Access Control Lists (ACLs) are the correct…
Question
Drag and Drop Question You have an Azure Data Lake Storage Gen 2 account named storage1. You need to recommend a solution for accessing the content in storage1. The solution must meet the following requirements:
- List and read permissions must be granted at the storage account
level.
- Additional permissions can be applied to individual objects in
storage1.
- Security principals from Microsoft Azure Active Directory (Azure AD),
part of Microsoft Entra, must be used for authentication. What should you use? To answer, drag the appropriate components to the correct requirements. Each component may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:
Exhibit
Answer Area
Drag items
Correct arrangement
- Role-based access control (RBAC) roles
- Access control lists (ACLs)
Explanation
RBAC roles are the correct choice for granting permissions at the storage account level using Azure AD security principals, as they allow broad permissions (like Storage Blob Data Reader) to be assigned across the entire account. Access Control Lists (ACLs) are the correct choice for applying additional fine-grained permissions to individual objects (files and directories) within Azure Data Lake Storage Gen2, and they also integrate with Azure AD identities. Together, RBAC provides the baseline account-level access while ACLs handle object-level granularity, which is the recommended security model for ADLS Gen2.
Topics
Community Discussion
No community discussion yet for this question.