Courseiva
mediumMultiple ChoiceObjective-mapped

DP-203 Practice Question: Refer to the exhibit

Network Topology
az role assignment listassignee user@contoso.comscope /subscriptions/.../resourceGroups/rg1/providers/Microsoft.Storage/storageAccounts/storage1/blobServices/default/containers/rawdatafile-system rawdatapath /2023/07/account-name storage1auth-mode login"acl": "user::rwx","roleDefinitionName": "Storage Blob Data Reader","scope": "/subscriptions/.../containers/rawdata""owner": "$superuser","group": "$superuser"

Refer to the exhibit. A user with Storage Blob Data Reader role on the container rawdata cannot list files under /2023/07/. What is the most likely reason?

⚠ Common exam trap

Candidates often assume the Storage Blob Data Reader role is sufficient for all read operations, but Azure Data Lake Storage Gen2 requires explicit ACL execute permission on directories for listing and traversal, which is a common point of confusion between flat blob storage and hierarchical namespace storage.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The directory ACL does not grant 'execute' permission to the user

In Azure Data Lake Storage Gen2, listing files in a directory requires both read (r) and execute (x) permissions on the directory itself. The Storage Blob Data Reader role grants read access to blob data but does not automatically grant the execute permission on directory ACLs. Without execute permission on the /2023/07/ directory, the user cannot traverse or list its contents, even though they can read blobs they know the path to.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The directory ACL does not grant 'execute' permission to the user

    Why this is correct

    To list directory contents, the user needs execute permission on the directory. 'other' has no permissions, so the user (not being owner or group) is denied.

  • The user does not have Storage Blob Data Contributor role

    Why it's wrong here

    Reader role is sufficient to list files if ACLs allow; the issue is ACLs, not role level.

  • The user is not the owner of the directory

    Why it's wrong here

    Ownership is not required for listing; appropriate ACLs are needed.

  • The container name is misspelled

    Why it's wrong here

    The exhibit shows correct container name; error is due to ACLs.

About these practice questions

This DP-203 question is part of Courseiva's 760-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This DP-203 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-203 exam.