DP-201 Exam - Question 48

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You plan to store delimited text files in an Azure Data Lake Storage account that will be organized into department folders.

You need to configure data access so that users see only the files in their respective department folder.

Solution: From the storage account, you enable a hierarchical namespace, and you use access control lists (ACLs).

Does this meet the goal?

Examice · Accepted Answer

To meet the goal of configuring data access so that users only see files in their respective department folders within Azure Data Lake Storage, you need to enable a hierarchical namespace and use access control lists (ACLs). Enabling a hierarchical namespace allows the storage account to organize data into a folder structure, and ACLs provide fine-grained access control to directories and files within the structure. Therefore, this solution correctly addresses the requirement.

niwe · Answer

Hierarchical namespace, must be enabled, so No.
https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-acl-dotnet

aksoumi · Answer

Also, note below from the Azure Documentation. In order to create ADLS account you have to enable Hierarchical option, else it is not ADLS. Hence correct ANSWER is "NO"
"You'll create a Data Lake Storage Gen2 account the same way you create an Azure Blob store, but with one setting difference. In Advanced, in the Data Lake Storage Gen2 (preview) section, next to Hierarchical namespace, select Enabled."

Apox · Answer

The answer is "NO"
Hierarchical namespace must be enabled to have a folder structure and actually be an ADLS account (or else it is regular blob)
However, it is correct to use ACLs, as this is the only mechanism to give "finer grain" level of access to directories and files. (except Shared Access Signature, but this would make more sense to use for external users for e.g. a limited amount of time) 
Source: https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-access-control-model

davita8 · Answer

B. No The answer

Anonymous · Answer

you enable a hierarchical namespace = then the storage account becomes Gen2
Enable ACL: Gen2 automatically has ACL
so the answer is Yes

satyamkishoresingh · Answer

This should be Yes as solution Fit the problem statement , 
Enable Hierarchical namespace + ACL

DP-201 Exam - Question 48

Discussion