DP-203 practice questions 261–270

1. Question 261 · 370 in bank

   HOTSPOT - You develop a dataset named DBTBL1 by using Azure Databricks. DBTBL1 contains the following columns: ✑ SensorTypeID ✑ GeographyRegionID ✑ Year ✑ Month ✑ Day ✑ Hour ✑ Minute ✑ Temperature ✑ WindSpeed ✑ Other You need to store the data to support daily incremental load pipelines that vary for each GeographyRegionID. The solution must minimize storage costs. How should you complete the code? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: .partitionBy - Incorrect Answers: ✑ .format: Method: format(): Arguments: "parquet", "csv", "txt", "json", "jdbc", "orc", "avro", etc. ✑ .bucketBy: Method: bucketBy() Arguments: (numBuckets, col, col..., coln) The number of buckets and names of columns to bucket by. Uses Hive's bucketing scheme on a filesystem. Box 2: ("Year", "Month", "Day","GeographyRegionID") Specify the columns on which to do the partition. Use the date columns followed by the GeographyRegionID column. Box 3: .saveAsTable("/DBTBL1") Method: saveAsTable() Argument: "table_name" The table to save to. Reference: https://www.oreilly.com/library/view/learning-spark-2nd/9781492050032/ch04.html https://docs.microsoft.com/en-us/azure/databricks/delta/delta-batch

   Source: Adapted from community discussion — PallaviPatel

   References

   • Microsoft Learn
   • Databricks documentation

   

   Next question

2. Question 262 · 370 in bank

   Select 2

   You are designing a security model for an Azure Synapse Analytics dedicated SQL pool that will support multiple companies. You need to ensure that users from each company can view only the data of their respective company. Which two objects should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • Aa security policy
   • Ba custom role-based access control (RBAC) role
   • Ca predicate function
   • Da column encryption key
   • Easymmetric keys

   Show answer

   Answer: AC

   Explanation

   Answer is A & C. Although as many have indicated, the steps are • Create the users or groups you want to isolate access. • Create the inline table-valued function that will filter the results based on the predicate defined. • Create a security policy for the table, assigning the function created above The first step may look like "objects"/option B but option B says "A custom role-based access control (RBAC) role. In reality, you would want to create a domain table with companyId and RoleName and create one Role per companyId. (Or maybe a set of roles per companyId depending on what the requirements are). Then the predicate function would use the meta data driven companyIdRoleName table.

   Source: Adapted from community discussion — MarkJoh

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

3. Question 263 · 370 in bank

   You have a SQL pool in Azure Synapse that contains a table named dbo.Customers. The table contains a column name Email. You need to prevent nonadministrative users from seeing the full email addresses in the Email column. The users must see values in a format of aXXX@XXXX.com instead. What should you do?

   • AFrom Microsoft SQL Server Management Studio, set an email mask on the Email column.
   • BFrom the Azure portal, set a mask on the Email column.
   • CFrom Microsoft SQL Server Management Studio, grant the SELECT permission to the users for all the columns in the dbo.Customers table except Email.
   • DFrom the Azure portal, set a sensitivity classification of Confidential for the Email column.

   Show answer

   Answer: A

   Explanation

   Go with A, reason for not B, if email column is string type ,default masking will make it as xxxxxxxx, so here I go with email mask on email column. https://learn.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview?view=azuresql

   Source: Adapted from community discussion — rzeng

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

4. Question 264 · 370 in bank

   You have an Azure Data Lake Storage Gen2 account named adls2 that is protected by a virtual network. You are designing a SQL pool in Azure Synapse that will use adls2 as a source. What should you use to authenticate to adls2?

   • Aan Azure Active Directory (Azure AD) user
   • Ba shared key
   • Ca shared access signature (SAS)
   • Da managed identity

   Show answer

   Answer: D

   Explanation

   Answer is correct. The blow link has more detains. "Analytic capabilities such as Dedicated SQL pool and Serverless SQL pool use multi-tenant infrastructure that is not deployed into the managed virtual network. In order for traffic from these capabilities to access the secured storage account, you must configure access to your storage account based on the workspace's system-assigned managed identity by following the steps below." https://learn.microsoft.com/en-us/azure/synapse-analytics/security/connect-to-a-secure-storage-account#grant-your-azure-synapse-workspace-access-to-your-secure-storage-account-as-a-trusted-azure-service

   Source: Adapted from community discussion — yogiazaad

   References

   • Microsoft Learn
   • Microsoft Learn

   Next question

5. Question 265 · 370 in bank

   HOTSPOT - You have an Azure Synapse Analytics SQL pool named Pool1. In Azure Active Directory (Azure AD), you have a security group named Group1. You need to control the access of Group1 to specific columns and rows in a table in Pool1. Which Transact-SQL commands should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: GRANT - You can implement column-level security with the GRANT T-SQL statement. With this mechanism, both SQL and Azure Active Directory (Azure AD) authentication are supported. Box 2: CREATE SECURITY POLICY - Implement RLS by using the CREATE SECURITY POLICY Transact-SQL statement, and predicates created as inline table-valued functions. Reference: https://docs.microsoft.com/en-us/azure/synapse-analytics/sql-data-warehouse/column-level-security https://docs.microsoft.com/en-us/sql/relational-databases/security/row-level-security

   Source: Adapted from community discussion — vrodriguesp

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

6. Question 266 · 370 in bank

   HOTSPOT - You need to implement an Azure Databricks cluster that automatically connects to Azure Data Lake Storage Gen2 by using Azure Active Directory (Azure AD) integration. How should you configure the new cluster? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: Premium - Credential passthrough requires an Azure Databricks Premium Plan Box 2: Azure Data Lake Storage credential passthrough You can access Azure Data Lake Storage using Azure Active Directory credential passthrough. When you enable your cluster for Azure Data Lake Storage credential passthrough, commands that you run on that cluster can read and write data in Azure Data Lake Storage without requiring you to configure service principal credentials for access to storage. Reference: https://docs.microsoft.com/en-us/azure/databricks/security/credential-passthrough/adls-passthrough

   References

   • Microsoft Learn
   • Microsoft Learn

   

   Next question

7. Question 267 · 370 in bank

   HOTSPOT - You have an Azure subscription that contains a logical Microsoft SQL server named Server1. Server1 hosts an Azure Synapse Analytics SQL dedicated pool named Pool1. You need to recommend a Transparent Data Encryption (TDE) solution for Server1. The solution must meet the following requirements: ✑ Track the usage of encryption keys. Maintain the access of client apps to Pool1 in the event of an Azure datacenter outage that affects the availability of the encryption keys.

   

   What should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Box 1: TDE with customer-managed keys Customer-managed keys are stored in the Azure Key Vault. You can monitor how and when your key vaults are accessed, and by whom. You can do this by enabling logging for Azure Key Vault, which saves information in an Azure storage account that you provide. Box 2: Create and configure Azure key vaults in two Azure regions The contents of your key vault are replicated within the region and to a secondary region at least 150 miles away, but within the same geography to maintain high durability of your keys and secrets. Reference: https://docs.microsoft.com/en-us/azure/synapse-analytics/security/workspaces-encryption https://docs.microsoft.com/en-us/azure/key-vault/general/logging

   Source: Adapted from community discussion — Alekx42

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

8. Question 268 · 370 in bank

   You are designing an Azure Synapse solution that will provide a query interface for the data stored in an Azure Storage account. The storage account is only accessible from a virtual network. You need to recommend an authentication mechanism to ensure that the solution can access the source data. What should you recommend?

   • Aa managed identity
   • Banonymous public read access
   • Ca shared key

   Show answer

   Answer: A

   Explanation

   A. A managed identity: By assigning a managed identity to the Azure Synapse solution, you can enable it to authenticate and access the Azure Storage account securely. The managed identity acts as a service principal and provides a way to authenticate to Azure services without the need for explicit credentials. By granting the managed identity appropriate permissions on the Azure Storage account, the solution can access the data while ensuring security and avoiding the need for storing and managing explicit credentials. B. Anonymous public read access is not recommended in this scenario as it would expose the data publicly without any authentication, which can lead to unauthorized access. C. A shared key is not recommended in this scenario as it involves managing and distributing the storage account's access keys, which can be cumbersome, less secure, and not ideal for scenarios where the storage account is only accessible from a virtual network.

   Source: Adapted from community discussion — vctrhugo

   Next question

9. Question 269 · 370 in bank

   You are developing an application that uses Azure Data Lake Storage Gen2. You need to recommend a solution to grant permissions to a specific application for a limited time period. What should you include in the recommendation?

   • Arole assignments
   • Bshared access signatures (SAS)
   • CAzure Active Directory (Azure AD) identities
   • Daccount keys

   Show answer

   Answer: B

   Explanation

   You are developing an application that uses Azure Data Lake Storage Gen2. You need to recommend a solution to grant permissions to a specific application for a limited time period. What should you include in the recommendation? A. role assignments B. shared access signatures (SAS) C. Azure Active Directory (Azure AD) identities D. account keys

   Source: Adapted from community discussion — vctrhugo

   Next question

10. Question 270 · 370 in bank

    HOTSPOT - You use Azure Data Lake Storage Gen2 to store data that data scientists and data engineers will query by using Azure Databricks interactive notebooks. Users will have access only to the Data Lake Storage folders that relate to the projects on which they work. You need to recommend which authentication methods to use for Databricks and Data Lake Storage to provide the users with the appropriate access. The solution must minimize administrative effort and development effort. Which authentication method should you recommend for each Azure service? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Box 1: Personal access tokens - You can use storage shared access signatures (SAS) to access an Azure Data Lake Storage Gen2 storage account directly. With SAS, you can restrict access to a storage account using temporary tokens with fine-grained access control. You can add multiple storage accounts and configure respective SAS token providers in the same Spark session. Box 2: Azure Active Directory credential passthrough You can authenticate automatically to Azure Data Lake Storage Gen1 (ADLS Gen1) and Azure Data Lake Storage Gen2 (ADLS Gen2) from Azure Databricks clusters using the same Azure Active Directory (Azure AD) identity that you use to log into Azure Databricks. When you enable your cluster for Azure Data Lake Storage credential passthrough, commands that you run on that cluster can read and write data in Azure Data Lake Storage without requiring you to configure service principal credentials for access to storage. After configuring Azure Data Lake Storage credential passthrough and creating storage containers, you can access data directly in Azure Data Lake Storage Gen1 using an adl:// path and Azure Data Lake Storage Gen2 using an abfss:// path: Reference: https://docs.microsoft.com/en-us/azure/databricks/data/data-sources/azure/adls-gen2/azure-datalake-gen2-sas-access https://docs.microsoft.com/en-us/azure/databricks/security/credential-passthrough/adls-passthrough

    Source: Adapted from community discussion — ItHYMeRIsh

    References

    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Microsoft Learn
    • Databricks documentation

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

DP-203 practice, question 261. 370 questions available.