DP-203 Practice Test 29 — 15 Questions

Question 1

You are reviewing an Azure Policy definition. What does this policy do?

Accepted Answer

Denies the creation or update of a storage account if its default blob service version is not set to '2020-10-02'. Option A is correct because the policy denies any storage account that does not have the default service version set to '2020-10-02'. Option B is wrong because it denies, not audits. Option C is wrong because it applies to all storage accounts, not just those with defaultServiceVersion set. Option D is wrong because it does not set the version; it denies if not set.

Answer

Sets the default blob service version of all storage accounts to '2020-10-02'

Answer

Audits storage accounts to check if their default blob service version is set to a value other than '2020-10-02'

Answer

Denies the creation of storage accounts that have the default blob service version set to '2020-10-02'

Question 2

You are monitoring an Azure Data Factory pipeline that runs daily to load data from an on-premises SQL Server to Azure Synapse Analytics. The pipeline has been failing intermittently with timeout errors. You need to configure alerts to notify the team when the pipeline fails. What is the most efficient way to achieve this?

Accepted Answer

Create an alert rule in Azure Monitor using the 'Pipeline failed runs' metric.. Option B is correct because Azure Monitor alerts on pipeline run metrics can trigger notifications based on failure conditions. Option A is wrong because Azure Log Analytics itself does not send alerts; it stores logs. Option C is wrong because Azure Service Health alerts are for Azure service issues, not pipeline failures. Option D is wrong because Microsoft Defender XDR is for security, not pipeline monitoring.

Answer

Enable diagnostic settings to send pipeline logs to a Log Analytics workspace and create a log search alert.

Answer

Use Azure Service Health alerts to notify when Data Factory is unhealthy.

Answer

Configure Microsoft Defender XDR to monitor pipeline activities.

Question 3

Refer to the exhibit. You are configuring an Azure Purview data policy for Azure Storage. The policy above is intended to audit all access events. However, the security team complains that not all read events are being audited. What is the most likely reason?

Accepted Answer

The storage account is not enabled for Purview policy enforcement.. Option C is correct because Azure Purview data policies for auditing require the 'Actions' to specifically include 'Read' or use 'ALL_ACTIONS' which should work, but the issue might be that the policy is not applied to the correct scope. Option A is wrong because the predicate 'true' includes all. Option B is wrong because 'ALL_ACTIONS' includes read. Option D is wrong because source and target include all. The most likely reason is that the policy is not deployed to the storage account or the storage account does not have the 'AllowPurviewPolicyEnforcement' property enabled.

Answer

The filter predicate is set to 'true', which only captures a subset of events.

Answer

The action group 'ALL_ACTIONS' does not include read events.

Answer

The policy excludes the 'Read' action by default.

Question 4

Your company uses Azure Blob Storage to store backups. You need to ensure that data is encrypted at rest using a customer-managed key stored in Azure Key Vault. Which feature should you enable?

Accepted Answer

Azure Storage Service Encryption with customer-managed keys. Option A is correct because Azure Storage Encryption supports customer-managed keys via Key Vault. Option B is incorrect because Azure Information Protection is for classification and labeling. Option C is incorrect because Azure Disk Encryption is for VMs, not Blob Storage. Option D is incorrect because Azure Purview is a data governance service.

Answer

Azure Purview

Answer

Azure Disk Encryption

Answer

Azure Information Protection

Question 5

Which TWO monitoring metrics in Azure Monitor for Azure Synapse Analytics dedicated SQL pool can help identify performance bottlenecks? (Choose two.)

Accepted Answer

Queued queries. Options A and C are correct. A indicates concurrency bottlenecks. C indicates data movement bottlenecks. B is wrong because it shows resource usage, not bottlenecks. D is wrong because it shows storage usage. E is wrong because it shows DWU usage, not specific bottlenecks.

Answer

CPU percentage

Answer

Storage used

Answer

DWU used

Question 6

Your organization uses Azure Purview for data governance. You need to ensure that sensitive data is properly classified and that access to it is monitored. Which THREE actions should you take? (Choose three.)

Accepted Answer

Create custom sensitivity labels in Microsoft Purview Information Protection and apply them to data sources.. Options A, B, and D are correct. A: Automated scanning classifies data. B: Labeling helps in applying sensitivity tags. D: Microsoft Defender for Cloud Apps can monitor access and generate alerts. Option C is wrong because Azure Policy does not directly classify or monitor data access. Option E is wrong because Azure Sentinel is for security incident detection, not data classification.

Answer

Define Azure Policy initiatives to enforce classification on all storage accounts.

Answer

Use Azure Sentinel to classify data as it is ingested.

Question 7

Which THREE actions can improve the performance of a dedicated SQL pool in Azure Synapse Analytics?

Accepted Answer

Partition large fact tables on a date column.. Options A, B, and E are correct. Using replicated tables avoids shuffling for small tables; partitioning large tables enables partition elimination; using result-set caching reduces load. Option C is wrong because rowstore indexes are slower for analytics; columnstore is preferred. Option D is wrong because round-robin distribution is for large tables with no natural key, but it may cause shuffles.

Answer

Use rowstore indexes instead of columnstore indexes.

Answer

Use round-robin distribution for all tables.

Question 8

You need to monitor the performance of an Azure Synapse Analytics dedicated SQL pool. Which DMV should you query to find queries that are currently running and their execution status?

Accepted Answer

sys.dm_pdw_exec_requests. Option D is correct because sys.dm_pdw_exec_requests shows currently running requests in a dedicated SQL pool. Option A is wrong because sys.dm_pdw_nodes is a system view, not for queries. Option B is wrong because sys.dm_pdw_request_steps shows steps of completed or running requests, not high-level status. Option C is wrong because sys.dm_pdw_errors shows errors, not running queries.

Answer

sys.dm_pdw_nodes

Answer

sys.dm_pdw_request_steps

Answer

sys.dm_pdw_errors

Question 9

You are reviewing an Azure Data Factory pipeline JSON. Based on the exhibit, what will be the behavior of the Copy activity when copying files from a source folder that contains subfolders?

Accepted Answer

All files from all subfolders will be copied into a single folder in the sink.. Option B is correct because recursive: true ensures all files from subfolders are copied, and FlattenHierarchy writes them to the sink without preserving the folder structure. Option A is wrong because recursive is true. Option C is wrong because FlattenHierarchy does not preserve structure. Option D is wrong because staging is disabled.

Answer

The copy will use staging to improve performance.

Answer

Only files in the root folder will be copied.

Answer

Files will be copied preserving the source folder structure.

Question 10

You have an Azure Synapse Analytics serverless SQL pool. You need to monitor the number of queries that are currently executing. Which dynamic management view should you query?

Accepted Answer

sys.dm_exec_requests. Option A is correct because sys.dm_exec_requests shows currently executing requests in serverless SQL pool. Option B is wrong because sys.dm_exec_sessions shows sessions, not executing queries. Option C is wrong because sys.dm_exec_query_stats shows cumulative statistics. Option D is wrong because sys.dm_resource_governor_workload_groups shows workload group configuration.

Answer

sys.dm_resource_governor_workload_groups

Answer

sys.dm_exec_query_stats

Answer

sys.dm_exec_sessions

Question 11

Your organization uses Azure Synapse Analytics serverless SQL pools to query data in Azure Data Lake Storage Gen2. You need to ensure that only users with specific Microsoft Entra ID roles can query the data. What should you configure?

Accepted Answer

Assign the Storage Blob Data Contributor role to the users on the Azure Data Lake Storage Gen2 account.. Option A is correct because Azure Synapse Analytics serverless SQL pools rely on Microsoft Entra ID (formerly Azure AD) tokens and RBAC roles to authorize access to data in Azure Data Lake Storage Gen2. The Storage Blob Data Contributor role grants read and write access to data. Option B is wrong because SAS tokens are shared secrets, not tied to user identity. Option C is wrong because managed identity is not suitable for per-user authorization. Option D is wrong because firewall rules control network access, not user-level authorization.

Answer

Generate a shared access signature (SAS) token for the storage account and include it in the external table definition.

Answer

Configure an IP firewall rule on the storage account to allow only the SQL pool's outbound IP addresses.

Answer

Create a managed identity for the SQL pool and grant it access to the storage account.

Question 12

You use Azure Data Lake Storage Gen2 with a hierarchical namespace. You need to delegate permissions to a group of data scientists so they can create folders and upload files only within a specific directory path. What is the best way to achieve this?

Accepted Answer

Set ACL entries on the specific directory path granting read, write, and execute permissions to the users.. Option B is correct because Azure Data Lake Storage Gen2 supports POSIX-like ACLs that can be set on directory paths to grant granular permissions. Option A is wrong because RBAC roles are scoped to the entire storage account or container, not subdirectories. Option C is wrong because SAS tokens are scoped to the entire storage account or container. Option D is wrong because access policies are for shared access signatures, not granular directory permissions.

Answer

Use a stored access policy to grant permissions to the directory.

Answer

Generate a shared access signature (SAS) with permissions scoped to the specific directory.

Answer

Assign the Storage Blob Data Contributor role to the users at the storage account level.

Question 13

Which TWO Azure services can be used to monitor data pipeline runs and set up alerts for failures in Azure Data Factory?

Accepted Answer

Azure Data Factory monitoring views. Options A and D are correct. Azure Monitor is the primary service for monitoring and alerts; Azure Data Factory metrics and logs are sent to Azure Monitor. Option B is wrong because Azure Sentinel is for security, not pipeline monitoring. Option C is wrong because Log Analytics is part of Azure Monitor but not the service name for alerting. Option E is wrong because Azure Automation is for automation, not monitoring.

Answer

Azure Log Analytics

Answer

Azure Sentinel

Answer

Azure Automation

Question 14

You are reviewing an Azure Resource Manager template for an Azure SQL Database auditing policy. Based on the exhibit, which of the following is true?

Accepted Answer

Audit logs will be written to Azure Blob Storage.. Option A is correct because the template enables auditing (state: Enabled) and specifies storageEndpoint, which sends audit logs to Azure Blob Storage. Option B is wrong because retentionDays is set to 90, not infinity. Option C is wrong because auditActionsAndGroups is provided, so default actions are not used. Option D is wrong because the property 'storageEndpoint' indicates blob storage, not Log Analytics.

Answer

Audit logs will be retained indefinitely.

Answer

The audit policy will use default audit actions and groups.

Answer

Audit logs will be sent to Azure Log Analytics.

Question 15

You need to monitor resource utilization for an Azure Synapse Analytics dedicated SQL pool. Which Azure Monitor metric shows the percentage of allocated DWU being used?

Accepted Answer

DWU used. Option C is correct because 'DWU used' metric shows the percentage of allocated DWU consumed. Option A is wrong because 'CPU percentage' is not a standard metric for Synapse. Option B is wrong because 'Data IO percentage' is not the primary metric. Option D is wrong because 'Memory percentage' is not directly DWU.

Answer

Memory percentage

Answer

Data IO percentage

Answer

CPU percentage

DP-203 Practice Test 29 — 15 Questions

Exhibit

DP-203 Practice Test 29 — 15 Questions

Exhibit