Azure Data Lake Storage Gen2 is correct.

Azure Data Lake Storage Gen2 provides a hierarchical namespace and supports POSIX style access control lists that can be applied to individual files and directories. This allows administrators to set read write and execute permissions on a per file and per directory basis similar to a traditional file system which is why it is the correct choice.

Azure Blob Storage is incorrect because it does not provide POSIX style ACLs on directories. Blob storage uses containers and blobs and you manage access with IAM roles and shared access signatures rather than filesystem ACLs on directories.

Google Cloud Storage is incorrect because it treats directories as virtual prefixes and not as real filesystem directories. While object level ACLs exist historically for objects you cannot apply POSIX style ACLs to true directories in the way a hierarchical file system supports.

Azure Cosmos DB is incorrect because it is a distributed NoSQL database and not a file system. It does not provide filesystem level ACLs for files and directories.

Full AWS Practitioner Certification Question