Exam DP-203 topic 3 question 43 discussion

Actual exam question from Microsoft's DP-203

Question #: 43
Topic #: 3

You have a Microsoft Entra tenant.

The tenant contains an Azure Data Lake Storage Gen2 account named storage1 that has two containers named fs1 and fs2.

You have a Microsoft Entra group named DepartmentA.

You need to meet the following requirements:

• DepartmentA must be able to read, write, and list all the files in fs1.
• DepartmentA must be prevented from accessing any files in fs2.
• The solution must use the principle of least privilege.

Which role should you assign to DepartmentA?

A. Contributor for fs1
B. Storage Blob Data Owner for fs1
C. Storage Blob Data Contributor for storage1
D. Storage Blob Data Contributor for fs1

Show Suggested Answer

Suggested Answer: D 🗳️

by tadenet at June 6, 2024, 7:06 p.m.

Comments

Submit Cancel

tadenet

1 year, 1 month ago

Selected Answer: D

correct! Storage Blob Data Contributor for fs1: This role grants the necessary read, write, and list permissions on fs1 only, adhering to the principle of least privilege and preventing access to fs2

upvoted 3 times

tai1123

1 year, 1 month ago

I think A.

upvoted 1 times

...