StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Object, file, and NoSQL data

Practice question 141 of 400 · hard

A service should access only one lake directory through Entra identity. Which two controls should be included? Select 2 answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Required directory execute/traversal permissions along the path
  2. B.Account-wide Blob Data Reader followed by an ACL deny to narrow that grant
  3. C.Narrowly scoped data-role grants or appropriate ACL authorization
  4. D.A subscription management role as sufficient permission to read every file
Show the answer and explanation

✓ Correct answers

  • Required directory execute/traversal permissions along the path
  • Narrowly scoped data-role grants or appropriate ACL authorization

Least-privilege data grants and required path traversal allow intended operations. A broad sufficient role cannot be narrowed by ACLs. Management-plane access does not automatically authorize file reads. Source guide: PDF page 27.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.