Secure, monitor, and optimize data storage and data processing →mediumMultiple SelectObjective-mapped
DP-203 Practice Question: Secure, monitor, and optimize data storage and data processing
You are securing an Azure Data Lake Storage Gen2 account that contains sensitive data. Which TWO of the following should you implement to protect data from unauthorized access?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure ACLs to grant least privilege to users and groups
ACLs provide fine-grained access control at the directory/file level, allowing you to grant least privilege to users and groups. Option B is correct because private endpoints ensure data traffic does not traverse the public internet, reducing exposure. Option C is wrong because a default ACL of 'read' for all authenticated users would grant broad access. Option D is wrong because CORS rules are for web applications, not security. Option E is wrong because large file shares are for Azure Files, not ADLS Gen2.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure ACLs to grant least privilege to users and groups
Why this is correct
ACLs allow granular permissions at the file and directory level.
- ✓
Use private endpoints to restrict access to the storage account
Why this is correct
Private endpoints ensure traffic stays within the Microsoft network.
- ✗
Set the default ACL to allow read access for all authenticated users
Why it's wrong here
This would grant broad read access, opposite of least privilege.
- ✗
Enable CORS rules to allow only specific origins
Why it's wrong here
CORS is for browser-based access, not a security control for unauthorized access.
- ✗
Enable large file shares on the storage account
Why it's wrong here
Large file shares is a feature for Azure Files, not ADLS Gen2.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 760 original DP-203 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-203 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-203 exam.