DP-203 Certification Practice Question #73

Question

You have an Azure subscription that contains an Azure Data Lake Storage Gen2 account named account1 and a user named User1.

In account1, you create a container named container1. In container1, you create a folder named folder1.

You need to ensure that User1 can list and read all the files in folder1. The solution must use the principle of least privilege.

How should you configure the permissions for each folder? To answer, drag the appropriate permissions to the correct folders. Each permission may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Accepted Answer

Least privilege in ADLS Gen2 ACLs means giving only traversal rights on parent folders and the minimum rights on the target folder. Microsoft Learn states that execute permission is required on each folder in the path to reach a child item, while listing a directory requires read and execute on that directory. Therefore, `container1` needs only Execute so User1 can traverse into it, and `folder1` needs Read + Execute so User1 can list and read the files there.

More DP-203 practice questions