DP-203 Practice Test 17 — 15 Questions

Question 1

Which THREE security features are available in Azure Data Lake Storage Gen2 to protect data at rest and in transit? (Choose three.)

Accepted Answer

Azure Storage firewalls and virtual network rules. Options A, C, and D are correct. Azure Storage firewalls and virtual network rules provide network-level security to restrict access. Encryption at rest using Storage Service Encryption (SSE) protects data at rest with AES-256 encryption. HTTPS ensures data in transit is encrypted. Option B (Azure Information Protection) is a classification and labeling service, not a built-in storage security feature. Option E (Azure Policy) is for governance and compliance, not direct data protection.

Answer

Azure Information Protection

Answer

Azure Policy

Question 2

You need to monitor resource utilization for an Azure Synapse Analytics dedicated SQL pool. Which Azure Monitor metric shows the percentage of allocated DWU being used?

Accepted Answer

DWU used. The 'DWU used' metric shows the percentage of allocated DWU being consumed. Option A is incorrect because 'Memory percentage' is not the metric for DWU utilization. Option B is incorrect because 'Data IO percentage' is not the primary metric for overall DWU usage. Option C is incorrect because 'CPU percentage' does not directly represent DWU consumption.

Answer

Memory percentage

Answer

Data IO percentage

Answer

CPU percentage

Question 3

Which TWO Azure services can be used to monitor and analyze query performance in Azure Synapse Analytics dedicated SQL pool?

Accepted Answer

Azure Monitor with Log Analytics. The correct answers are D and E. Azure Monitor with Log Analytics collects and analyzes telemetry data, including query performance metrics from Azure Synapse Analytics. Dynamic Management Views (DMVs) provide detailed insights into query execution statistics, such as wait types and resource usage. Option A (SQL Data Sync) is for data synchronization across databases, not monitoring. Option B (Azure Policy) is for governance and compliance, not performance analysis. Option C (Azure Advisor) offers optimization recommendations but not real-time monitoring.

Answer

SQL Data Sync

Answer

Azure Policy

Answer

Azure Advisor

Question 4

Your team uses Azure Databricks for data processing. You need to implement a cost-control strategy that automatically terminates idle clusters after 30 minutes of inactivity, but allows users to override this policy for specific workloads that require long-running clusters. What is the most efficient approach?

Accepted Answer

Create a cluster policy that enforces auto-termination with a default of 30 minutes, but allows users to override the value for specific clusters.. Cluster policies in Azure Databricks allow admins to define rules (e.g., auto-termination) while allowing users to choose different values within allowed limits. Option A is wrong because manual termination is not automatic. Option B is wrong because cluster policies are not enforced by Azure Policy. Option C is wrong because auto-termination is a cluster-level setting, not a global policy.

Answer

Instruct all users to set auto-termination to 30 minutes on each cluster they create.

Answer

Configure a global auto-termination setting in the Azure Databricks workspace that terminates all clusters after 30 minutes of inactivity.

Answer

Use Azure Policy to enforce a tag that triggers a function to terminate idle clusters.

Question 5

You are securing an Azure Data Lake Storage Gen2 account that contains sensitive data. Which TWO of the following should you implement to protect data from unauthorized access?

Accepted Answer

Configure ACLs to grant least privilege to users and groups. ACLs provide fine-grained access control at the directory/file level, allowing you to grant least privilege to users and groups. Option B is correct because private endpoints ensure data traffic does not traverse the public internet, reducing exposure. Option C is wrong because a default ACL of 'read' for all authenticated users would grant broad access. Option D is wrong because CORS rules are for web applications, not security. Option E is wrong because large file shares are for Azure Files, not ADLS Gen2.

Answer

Set the default ACL to allow read access for all authenticated users

Answer

Enable CORS rules to allow only specific origins

Answer

Enable large file shares on the storage account

Question 6

Your Azure Databricks workspace contains sensitive customer data. You need to ensure that only users with a specific Microsoft Entra ID role can access the workspace, and all access must be logged and monitored. You also need to audit data access at the table level. What should you implement?

Accepted Answer

Enable Unity Catalog and assign the Databricks workspace to use Entra ID as the identity provider. Configure audit logs for the workspace. Azure Databricks with Unity Catalog provides fine-grained access control at the table level and integrates with Entra ID for authentication, and audit logs capture access events. Option A is wrong because SCIM provisioning only syncs users, not access control. Option B is wrong because IP access lists control network access, not data access. Option D is wrong because Microsoft Defender XDR is for security monitoring across Microsoft 365, not specifically for Databricks table-level auditing.

Answer

Configure SCIM provisioning to sync the Entra ID group to Databricks and assign the group to the workspace

Answer

Set up IP access lists to restrict workspace access to the corporate network and enable diagnostic logs

Answer

Use Microsoft Defender XDR to monitor access to the Databricks workspace

Question 7

An organization is using Azure Data Factory to ingest data from multiple on-premises SQL Server databases into Azure Synapse Analytics. They need to ensure that sensitive data is masked during ingestion before landing in the staging area. What is the best approach?

Accepted Answer

Use a Mapping Data Flow with derived column transformations to mask sensitive columns.. Mapping Data Flow in Azure Data Factory allows you to transform data during ingestion. Using derived column transformations, you can apply masking functions (e.g., substituting characters, hashing) to sensitive columns before writing to the staging area. This approach masks data before it reaches the staging area, meeting the requirement. Option A (Azure Policy) is for compliance and cannot mask data. Option B (Dynamic Data Masking on source) masks data at query time, not during ingestion. Option D (Azure Purview) is for data governance and classification, not for masking data during a pipeline.

Answer

Apply an Azure Policy that masks sensitive data in Azure Synapse Analytics.

Answer

Use Azure SQL Database dynamic data masking on the source databases.

Answer

Use Azure Purview to classify and mask sensitive data automatically.

Question 8

You need to monitor the performance of Azure Stream Analytics jobs. Which Azure Monitor metric can be used to detect if the job is falling behind in processing input data?

Accepted Answer

InputEventsBacklog. InputEventsBacklog tracks the number of input events that remain unprocessed, directly indicating whether the job is falling behind. WatermarkDelay (option A) measures the time difference between event occurrence and processing, which can indicate latency but not the backlog count. OutputEvents (option C) counts events sent to output, unrelated to backlog. RuntimeErrors (option D) counts errors, not backlog.

Answer

WatermarkDelay

Answer

OutputEvents

Answer

RuntimeErrors

Question 9

You have an Azure Synapse Analytics dedicated SQL pool that handles both high-priority real-time queries and low-priority batch jobs. You need to ensure that high-priority queries always get the resources they need, while batch jobs do not starve. What should you configure?

Accepted Answer

Create workload groups for high-priority and low-priority queries, assigning appropriate importance and resource percentages. Workload management with workload groups allows you to set importance and resource allocation. Option A is wrong because result-set caching does not prioritize queries. Option B is wrong because data compression reduces storage but does not affect prioritization. Option D is wrong because materialized views improve performance but do not prioritize.

Answer

Enable result-set caching for the high-priority queries

Answer

Enable data compression on the tables used by batch jobs

Answer

Create materialized views for the batch job queries

Question 10

You are running an Azure Stream Analytics job that reads from an Event Hub and writes to a Power BI dataset. The job is falling behind and processing latency is increasing. What should you do to improve performance?

Accepted Answer

Increase the number of Streaming Units (SUs) allocated to the job.. Increasing the number of Streaming Units (SUs) allocates more compute resources to the Azure Stream Analytics job, directly improving throughput and reducing processing latency. Option B (use reference data) does not address throughput; it is used for enriching streams with static data. Option C (change output to Blob Storage) avoids Power BI throughput limits but does not fix the job's compute performance. Option D (decrease event size) is not typically under the control of the job configuration and may not be feasible.

Answer

Use a reference data input to filter events.

Answer

Change the output to Azure Blob Storage instead of Power BI.

Answer

Decrease the size of events sent to the Event Hub.

Question 11

Your organization uses Azure Synapse Analytics to run large-scale queries. You need to implement a solution that automatically pauses the dedicated SQL pool when no activity is detected for a specified period, and resumes it when a connection is attempted. What should you configure?

Accepted Answer

You cannot configure auto-pause for a dedicated SQL pool.. Azure Synapse Analytics dedicated SQL pool does not support auto-pause; auto-pause is only available for serverless SQL pools. Option B (Azure Automation runbook) could be used as a custom solution but is not a built-in feature. Option C (Azure Functions) also provides a custom approach but is not a native configuration. Option D (setting auto-pause delay) applies only to serverless SQL pools, not dedicated SQL pools. Therefore, the only accurate statement is that you cannot configure auto-pause for a dedicated SQL pool.

Answer

Use Azure Automation to run a PowerShell script that pauses and resumes the pool.

Answer

Create an Azure Function that pauses the pool on a schedule.

Answer

Set the auto-pause delay in the SQL pool properties.

Question 12

Which TWO Azure services can be used to monitor Azure Data Factory pipeline runs and set up alerts?

Accepted Answer

Log Analytics. Log Analytics and Azure Monitor are the correct choices because they directly support monitoring and alerting for Azure Data Factory pipeline runs. Microsoft Sentinel is a SIEM that consumes logs from Log Analytics but is not a primary monitoring service for ADF. Azure Policy enforces governance rules and does not provide monitoring. Azure Advisor offers recommendations for optimization, not real-time monitoring or alerts.

Answer

Microsoft Sentinel

Answer

Azure Policy

Answer

Azure Advisor

Question 13

Your team is running a critical Azure Stream Analytics job that writes results to Azure SQL Database. Recently, the job has been failing with high latency and occasional data loss. You need to monitor the job's performance and set up alerts for when the watermark delay exceeds a threshold. What should you use?

Accepted Answer

Azure Monitor metrics for the Stream Analytics job.. Azure Monitor provides built-in metrics for Azure Stream Analytics jobs, including the watermark delay metric, which can be used to set up alerts. Option A is incorrect because Application Insights SDK integration is not supported for Stream Analytics jobs; monitoring is done via Azure Monitor metrics. Option B is incorrect because while Log Analytics can store diagnostics logs, it does not directly expose the watermark delay metric for alerting. Option D is incorrect because Azure Data Explorer is a data exploration service, not a monitoring tool for Stream Analytics.

Answer

Application Insights SDK integration in the job.

Answer

Azure Log Analytics workspace connected to the job diagnostics logs.

Answer

Azure Data Explorer for querying job performance data.

Question 14

You need to monitor the performance of an Azure Stream Analytics job in real time. Which Azure service should you use to track the job's resource utilization (e.g., SU % utilization) and set up alerts when the job is approaching its capacity?

Accepted Answer

Azure Monitor. Azure Monitor provides real-time metrics such as SU % utilization for Azure Stream Analytics jobs and allows you to set up alerts based on these metrics. Option B is incorrect because Azure Advisor offers best practice recommendations, not real-time monitoring and alerts. Option C is incorrect because Microsoft Sentinel is a SIEM tool for security analytics. Option D is incorrect because Azure Log Analytics is used for log analysis, not primarily for real-time metric alerts on resource utilization.

Answer

Azure Advisor

Answer

Microsoft Sentinel

Answer

Azure Log Analytics

Question 15

Which TWO Azure services can be used to audit data access and changes in Azure Data Lake Storage Gen2? (Choose two.)

Accepted Answer

Storage account diagnostic settings.. Options C and D are correct. Storage account diagnostic settings enable logging of read, write, and delete operations to Azure Data Lake Storage Gen2, which can be used for auditing. Azure Monitor collects these logs and integrates with Microsoft Sentinel for advanced security monitoring and threat detection. Option A is incorrect because Microsoft Entra ID sign-in logs track user authentication, not data access at the storage level. Option B is incorrect because Azure Backup reports focus on backup status, not auditing data changes. Option E is incorrect because Azure Policy enforces compliance rules but does not audit data access or modification events.

Answer

Microsoft Entra ID sign-in logs.

Answer

Azure Backup reports.

Answer

Azure Policy.