Azure Data lake (ADL) Gen2 employs a comprehensive and robust security mechanism to protect stored data. Its security mechanism has six layers of protection.  Authentication: For authentication, it uses Azure Active Directory (AD), Shared Access Token, and Shared Key to keep user accounts secure.  Access control: It uses access control lists (ACLs) and roles for granular control over who is entitled to access which resources.  Network isolation: It allows admins to isolate networks logically by using firewalls to accept or refuse network traffic from specific IP addresses or VPNs .   Data protection: As part of the data protection security measure, it encrypts data in transit via HTTPs to secure confidential information. Also, it encrypts data at rest.  Advanced threat protection: This layer helps in monitoring any attempts to exploit or access the storage account. It will alert in case of any malicious activity detected.  Auditing: All management activities are logged by ADL Gen2. ADLS logs will provide information on activities that took place in your account. This auditing capability will help in identifying malicious activities and trace threat actors.