Correct Answer: D
Like most other Azure services, security data in ADLS can be done using Azure role-based access control (RBAC) and Access control Lists (ACL). User and group based permissions and restrictions must be enabled to manage security effectively with ADLS data.
AD security groups should be assigned with appropriate ACLs. In addition to that, IP-based restrictions can be implemented as an additional layer of protection at the network level. Options A and B are incorrect: Since they are talking about creating and assigning the security groups with ADLS which is a required part of implementing Azure RBAC and ACLs.
Option C is incorrect: This is a network layer restriction that can be implemented at ADLS Gen1. So, that is also a security implementation.
Reference: To know more, please refer to the docs below:
https://docs.microsoft.com/en-us/azure/data-lake-store/data-lake-store-secure-data