Question 240

You have a Microsoft Entra tenant. The tenant contains an Azure Data Lake Storage Gen2 account named storage1 that has two containers named fs1 and fs2. You have a Microsoft Entra group named DepartmentA. You need to meet the following requirements: • DepartmentA must be able to read, write, and list all the files in fs1. • DepartmentA must be prevented from accessing any files in fs2. • The solution must use the principle of least privilege. Which role should you assign to DepartmentA?

• AContributor for fs1
• BStorage Blob Data Owner for fs1
• CStorage Blob Data Contributor for storage1
• DStorage Blob Data Contributor for fs1