Courseiva

DP-203 Practice Question: Secure, monitor, and optimize data storage and data processing

You are securing an Azure Data Lake Storage Gen2 account that contains sensitive data. Which TWO of the following should you implement to protect data from unauthorized access?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Configure ACLs to grant least privilege to users and groups

ACLs provide fine-grained access control at the directory/file level, allowing you to grant least privilege to users and groups. Option B is correct because private endpoints ensure data traffic does not traverse the public internet, reducing exposure. Option C is wrong because a default ACL of 'read' for all authenticated users would grant broad access. Option D is wrong because CORS rules are for web applications, not security. Option E is wrong because large file shares are for Azure Files, not ADLS Gen2.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Configure ACLs to grant least privilege to users and groups

    Why this is correct

    ACLs allow granular permissions at the file and directory level.

  • Use private endpoints to restrict access to the storage account

    Why this is correct

    Private endpoints ensure traffic stays within the Microsoft network.

  • Set the default ACL to allow read access for all authenticated users

    Why it's wrong here

    This would grant broad read access, opposite of least privilege.

  • Enable CORS rules to allow only specific origins

    Why it's wrong here

    CORS is for browser-based access, not a security control for unauthorized access.

  • Enable large file shares on the storage account

    Why it's wrong here

    Large file shares is a feature for Azure Files, not ADLS Gen2.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

One of 760 original DP-203 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This DP-203 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-203 exam.