Microsoft Exam DP-500 Topic 4 Question 36 Discussion

Actual exam question for Microsoft's DP-500 exam

Question #: 36
Topic #: 4

You have a Power Bl tenant and an Azure subscription named Sub1. The Power Bl tenant and Sub1 are linked to a single Azure AD tenant.

In Sub1, you create a storage account named storage1.

You need to configure a Power Bl workspace to store dataflows in storage1. The solution must use the principle of least privilege.

Which three roles should you assign for storage1? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

AReader

BStorage Blob Data Contributor

CContributor

DOwner

EStorage Blob Data Owner

FStorage Blob Data Reader

Show Suggested Answer

Suggested Answer: A, B, D

by Eden at Mar 15, 2024, 03:19 AM

Limited Time Offer

25%

Off

Get Premium DP-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Talia

6 months ago

That makes sense. We can control access more effectively that way.

upvoted 0 times

...

Blondell

6 months ago

I believe we should also assign Reader role for storage1 to limit access.

upvoted 0 times

...

Mindy

7 months ago

I agree with that. It follows the principle of least privilege.

upvoted 0 times

...

Talia

7 months ago

I think we should assign Storage Blob Data Contributor role for storage1.

upvoted 0 times

...

Krissy

8 months ago

Sounds good to me. Now let's just hope the exam doesn't throw us a curveball and ask for 'Storage Blob Data Owner' instead. That would be a real head-scratcher!

upvoted 0 times

Bettye

8 months ago

C) Contributor

upvoted 0 times

...

Tresa

8 months ago

B) Storage Blob Data Contributor

upvoted 0 times

...

Shawnda

8 months ago

A) Reader

upvoted 0 times

...

Glory

8 months ago

Alright, let's go with 'Storage Blob Data Contributor', 'Reader', and 'Storage Blob Data Reader'. That should do the trick!

upvoted 0 times

...

Fabiola

8 months ago

I think 'Storage Blob Data Reader' could be the third one. That would allow the Power BI workspace to read from the storage account, but not have any other permissions.

upvoted 0 times

...

Annmarie

8 months ago

Ah, yes, that's a good point. The principle of least privilege is key here, and 'Storage Blob Data Reader' fits the bill.

upvoted 0 times

...