DP-300 Certification Practice Question #73

Question

You are developing an application that uses Azure Data Lake Storage Gen 2.
You need to recommend a solution to grant permissions to a specific application for a limited time period.
What should you include in the recommendation?

Accepted Answer

To grant delegated permissions to an application to access resources in Azure Data Lake Storage Gen2 (which is built on Azure Blob Storage) for a limited time period, you should use a Shared Access Signature (SAS). A SAS allows you to define the specific permissions (read, write, delete, etc.) and set a start and expiry time for the validity of the access token, automatically revoking access after the time limit expires. Other options like account keys (B) grant permanent full administrative access, and standard role assignments (A) or Entra ID identities (D) typically grant persistent access.

More DP-300 practice questions