DP-203 practice questions 291–300

1. Question 291 · 370 in bank

   You have a tenant in Microsoft Azure Active Directory (Azure AD), part of Microsoft Entra. The tenant contains a group named Group1. You have an Azure subscription that contains the resources shown in the following table.

   

   You need to ensure that members of Group1 can read CSV files from storage1 by using the OPENROWSET function. The solution must meet the following requirements: • The members of Group1 must use credential1 to access storage1. • The principle of least privilege must be followed. Which permission should you grant to Group1?

   • AEXECUTE
   • BCONTROL
   • CREFERENCES
   • DSELECT

   Show answer

   Answer: C

   Explanation

   To be fair, I know I answered with both answers, but the context isn't at all that clear. So depending on the context it could be D or C really.

   Source: Adapted from community discussion — vernillen

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

2. Question 292 · 370 in bank

   Select 2

   You have an Azure subscription that contains an Azure Data Lake Storage account named dl1 and an Azure Analytics Synapse workspace named workspace1. You need to query the data in dl1 by using an Apache Spark pool named Pool1 in workspace1. The solution must ensure that the data is accessible Pool1. Which two actions achieve the goal? Each correct answer presents a complete solution. NOTE: Each correct answer is worth one point.

   • AImplement Azure Synapse Link.
   • BLoad the data to the primary storage account of workspace1.
   • CFrom workspace1, create a linked service for the dl1.
   • DFrom Microsoft Purview, register dl1 as a data source.

   Show answer

   Answer: BC

   Explanation

   Would say Purview only registers the data source to track lineage, should not have anything to do with access. Synapse Link is not concerned with data lake. Seemingly, data lake storage has to be configured as primary storage as per: https://learn.microsoft.com/en-us/troubleshoot/azure/synapse-analytics/spark/spark-jobexec-storage-access#common-issues-and-solutions

   Source: Adapted from community discussion — jongert

   References

   • Microsoft Learn

   Next question

3. Question 293 · 370 in bank

   You have an Azure Synapse Analytics dedicated SQL pool named SQL1 and a user named User1. You need to ensure that User1 can view requests associated with SQL1 by querying the sys.dm_pdw_exec_requests dynamic management view. The solution must follow the principle of least privilege. Which permission should you grant to User1?

   • AVIEW DATABASE STATE
   • BSHOWPLAN
   • CCONTROL SERVER
   • DVIEW ANY DATABASE

   Show answer

   Answer: A

   References

   • Microsoft Learn

   Next question

4. Question 294 · 370 in bank

   You have a Microsoft Entra tenant. The tenant contains an Azure Data Lake Storage Gen2 account named storage1 that has two containers named fs1 and fs2. You have a Microsoft Entra group named DepartmentA. You need to meet the following requirements: • DepartmentA must be able to read, write, and list all the files in fs1. • DepartmentA must be prevented from accessing any files in fs2. • The solution must use the principle of least privilege. Which role should you assign to DepartmentA?

   • AContributor for fs1
   • BStorage Blob Data Owner for fs1
   • CStorage Blob Data Contributor for storage1
   • DStorage Blob Data Contributor for fs1

   Show answer

   Answer: D

   Explanation

   correct! Storage Blob Data Contributor for fs1: This role grants the necessary read, write, and list permissions on fs1 only, adhering to the principle of least privilege and preventing access to fs2

   Source: Adapted from community discussion — tadenet

   Next question

5. Question 295 · 370 in bank

   Select 3

   You develop data engineering solutions for a company. A project requires the deployment of data to Azure Data Lake Storage. You need to implement role-based access control (RBAC) so that project members can manage the Azure Data Lake Storage resources. Which three actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

   • ACreate security groups in Azure Active Directory (Azure AD) and add project members.
   • BConfigure end-user authentication for the Azure Data Lake Storage account.
   • CAssign Azure AD security groups to Azure Data Lake Storage.
   • DConfigure Service-to-service authentication for the Azure Data Lake Storage account.
   • EConfigure access control lists (ACL) for the Azure Data Lake Storage account.

   Show answer

   Answer: ACE

   Explanation

   Create security groups in Azure Active Directory (Azure AD) and add project members: Start by creating the necessary security groups in Azure AD and adding the project members to these groups. This step allows you to organize users and manage their permissions collectively. Configure access control lists (ACL) for the Azure Data Lake Storage account: Next, configure the access control lists (ACL) for the Azure Data Lake Storage account. ACLs provide granular control over permissions at the individual file or folder level within the storage. By setting up ACLs, you can define specific access rights for different data assets. Assign Azure AD security groups to Azure Data Lake Storage: Once the security groups and ACLs are set up, assign the Azure AD security groups to the Azure Data Lake Storage account. This step associates the security groups with the storage resources and enables you to grant permissions based on group membership rather than individually managing permissions for each user.

   Source: Adapted from community discussion — vctrhugo

   Next question

6. Question 296 · 370 in bank

   You have an Azure Data Factory version 2 (V2) resource named Df1. Df1 contains a linked service. You have an Azure Key vault named vault1 that contains an encryption key named key1. You need to encrypt Df1 by using key1. What should you do first?

   • AAdd a private endpoint connection to vault1.
   • BEnable Azure role-based access control on vault1.
   • CRemove the linked service from Df1.
   • DCreate a self-hosted integration runtime.

   Show answer

   Answer: C

   Explanation

   I believe this is correct, based on the question: What should you do FIRST? A DF needs to be empty to be encrypted: https://docs.microsoft.com/en-us/azure/data-factory/enable-customer-managed-key#post-factory-creation-in-data-factory-ui So FIRST we need to empty the DF - then we can move on.

   Source: Adapted from community discussion — gnulf69

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

7. Question 297 · 370 in bank

   You are designing an Azure Synapse Analytics dedicated SQL pool. You need to ensure that you can audit access to Personally Identifiable Information (PII). What should you include in the solution?

   • Acolumn-level security
   • Bdynamic data masking
   • Crow-level security (RLS)
   • Dsensitivity classifications

   Show answer

   Answer: D

   Explanation

   An important aspect of the classification is the ability to monitor access to sensitive data. Azure SQL Auditing has been enhanced to include a new field in the audit log called data_sensitivity_information. This field logs the sensitivity classifications (labels) of the data that was returned by a query. Ref - https://docs.microsoft.com/en-us/azure/azure-sql/database/data-discovery-and-classification-overview?view=azuresql

   Source: Adapted from community discussion — Deeksha1234

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   Next question

8. Question 298 · 370 in bank

   HOTSPOT - You are designing an Azure Synapse Analytics dedicated SQL pool. Groups will have access to sensitive data in the pool as shown in the following table.

   

   You have policies for the sensitive data. The policies vary be region as shown in the following table.

   

   You have a table of patients for each region. The tables contain the following potentially sensitive columns.

   

   You are designing dynamic data masking to maintain compliance. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://docs.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview

   Source: Adapted from community discussion — [Removed]

   

   Next question

9. Question 299 · 370 in bank

   You implement an enterprise data warehouse in Azure Synapse Analytics. You have a large fact table that is 10 terabytes (TB) in size. Incoming queries use the primary key SaleKey column to retrieve data as displayed in the following table:

   

   You need to distribute the large fact table across multiple nodes to optimize performance of the table. Which technology should you use?

   • Ahash distributed table with clustered index
   • Bhash distributed table with clustered Columnstore index
   • Cround robin distributed table with clustered index
   • Dround robin distributed table with clustered Columnstore index
   • Eheap table with distribution replicate

   Show answer

   Answer: B

   Explanation

   It says it uses the SaleKey. Round-robin is generally not effective at these large scale tables. The 10 tb was a very important hint here.

   Source: Adapted from community discussion — Preben

   References

   • Microsoft Learn

   Next question

10. Question 300 · 370 in bank

    You have a SQL pool in Azure Synapse. You discover that some queries fail or take a long time to complete. You need to monitor for transactions that have rolled back. Which dynamic management view should you query?

    • Asys.dm_pdw_request_steps
    • Bsys.dm_pdw_nodes_tran_database_transactions
    • Csys.dm_pdw_waits
    • Dsys.dm_pdw_exec_sessions

    Show answer

    Answer: B

    Explanation

    Correct Answer! A. sys.dm_pdw_request_steps: Provides detailed information about each step of a request executed in Azure Synapse Analytics, including execution status and step type. B. sys.dm_pdw_nodes_tran_database_transactions: Displays information about active transactions on each node in the distributed database system within Azure Synapse Analytics. C. sys.dm_pdw_waits: Shows information about the waiting tasks in Azure Synapse Analytics, including wait types and durations, to help diagnose query performance issues. D. sys.dm_pdw_exec_sessions: Lists all active and historic sessions in Azure Synapse Analytics, including session details and activity status.

    Source: Adapted from community discussion — SOF_15

    References

    • Microsoft Learn

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

DP-203 practice, question 291. 370 questions available.