ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 206 - DP-203 discussion

Report
Export

You have an Azure subscription linked to an Azure Active Directory (Azure AD) tenant that contains a service principal named ServicePrincipal1. The subscription contains an Azure Data Lake Storage account named adls1. Adls1 contains a folder named Folder2 that has a URI of https://adls1.dfs.core.windows.net/container1/Folder1/Folder2/. ServicePrincipal1 has the access control list (ACL) permissions shown in the following table.

You need to ensure that ServicePrincipal1 can perform the following actions:

Traverse child items that are created in Folder2. Read files that are created in Folder2. The solution must use the principle of least privilege.

Which two permissions should you grant to ServicePrincipal1 for Folder2? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

A.
Access - Read
Answers
A.
Access - Read
B.
Access - Write
Answers
B.
Access - Write
C.
Access - Execute
Answers
C.
Access - Execute
D.
Default - Read
Answers
D.
Default - Read
E.
Default - Write
Answers
E.
Default - Write
F.
Default - Execute
Answers
F.
Default - Execute
Suggested answer: D, F

Explanation:

Execute (X) permission is required to traverse the child items of a folder. There are two kinds of access control lists (ACLs), Access ACLs and Default ACLs. Access ACLs: These control access to an object. Files and folders both have Access ACLs. Default ACLs: A "template" of ACLs associated with a folder that determine the Access ACLs for any child items that are created under that folder. Files do not have Default ACLs. Reference:

https://docs.microsoft.com/en-us/azure/data-lake-store/data-lake-store-access-control

asked 02/10/2024
Abdulilah Alhousainy
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first