DP-203 Practice Test 33 — 15 Questions

Question 1

Your Azure Stream Analytics job is failing to start because the job's storage account is configured to allow access from selected networks. The job uses managed identity for authentication. What should you do to resolve the issue?

Accepted Answer

Add the Stream Analytics job's managed identity as a trusted service in the storage account firewall.. Option C is correct because the Stream Analytics job's managed identity must be added as a trusted service to bypass the network restrictions. Option A is wrong because firewall rules apply to all services; managed identity must be explicitly allowed. Option B is wrong because private endpoints require additional configuration and are not required. Option D is wrong because SAS tokens are not needed with managed identity.

Answer

Create a private endpoint for the Stream Analytics job to access the storage account.

Answer

Disable the firewall on the storage account to allow all networks.

Answer

Generate a SAS token for the storage account and configure the job to use it.

Question 2

You run the PowerShell command shown in the exhibit for an Azure Synapse Analytics dedicated SQL pool. Which configuration will be applied?

Accepted Answer

The SQL pool is set to auto-pause after 15 minutes of inactivity.. Option B is correct because the command sets auto-pause delay to 15 minutes, but the property 'IsTransactional' is not a valid property for Set-AzSynapseSqlPool; it will be ignored. Auto-pause is a serverless SQL pool feature, but for dedicated SQL pool, it's not supported; however, the command will attempt to set it but fail silently or be ignored. In practice, auto-pause delay is only for serverless SQL pools. The most accurate answer is that auto-pause is set, but other properties are invalid.

Answer

The SQL pool is configured with transactional replication and auto-pause.

Answer

The command fails because dedicated SQL pools do not support auto-pause.

Answer

The SQL pool is partitioned into 10 partitions with automatic cleanup.

Question 3

You need to audit all queries run against an Azure Synapse Analytics serverless SQL pool. What should you enable?

Accepted Answer

Azure SQL Auditing on the serverless SQL pool endpoint. Option B is correct because auditing is configured at the server level for SQL pools, capturing query logs. Option A (Azure Monitor) is for metrics, not query text. Option C (Azure Policy) is for compliance. Option D (Azure Purview) is for data cataloging.

Answer

Microsoft Purview to scan and catalog queries

Answer

Azure Policy to enforce auditing

Answer

Azure Monitor diagnostic settings

Question 4

Which TWO actions should you take to secure access to an Azure Data Lake Storage Gen2 account using Microsoft Entra ID?

Accepted Answer

Assign Azure RBAC roles such as Storage Blob Data Contributor to users or groups.. Options A and B are correct. Option A: Enabling hierarchical namespace is required for ACLs. Option B: RBAC roles like Storage Blob Data Contributor provide coarse-grained access. Option C is wrong because storage account keys bypass identity. Option D is wrong because SAS tokens also bypass identity. Option E is wrong because firewall rules do not use Entra ID.

Answer

Generate a shared access signature (SAS) token with limited permissions.

Answer

Configure a storage firewall to allow only specific IP addresses.

Answer

Use storage account access keys for authentication.

Question 5

You need to monitor the performance of Azure Stream Analytics jobs. Which Azure Monitor metric can be used to detect if the job is falling behind in processing input data?

Accepted Answer

InputEventsBacklog. InputEventsBacklog measures the number of input events that are not yet processed, indicating the job is falling behind. Option B is wrong because OutputEvents counts events written. Option C is wrong because WatermarkDelay shows the latency. Option D is wrong because RuntimeErrors counts errors.

Answer

WatermarkDelay

Answer

OutputEvents

Answer

RuntimeErrors

Question 6

Refer to the exhibit. You run the Kusto query in Azure Monitor Logs to analyze Data Factory pipeline runs. What is the purpose of this query?

Accepted Answer

Identify pipelines with the most failed activity runs per hour. The query filters failed activity runs, groups by pipeline and hourly bins, then sorts by count descending to show pipelines with most failures. Option B is wrong because it's not about duration. Option C is wrong because it's not about all runs. Option D is wrong because it's not about triggers.

Answer

List all pipeline runs regardless of status

Answer

Calculate the average duration of failed pipeline runs

Answer

Show the number of failed trigger runs per hour

Question 7

Which TWO actions should you take to secure data in Azure Synapse Analytics dedicated SQL pool? (Choose two.)

Accepted Answer

Apply dynamic data masking (DDM) to obfuscate sensitive data.. Options A and D are correct. Row-level security restricts data access, and dynamic data masking obfuscates sensitive data. Option B is wrong because PolyBase is for data movement, not security. Option C is wrong because workload management is for performance, not security. Option E is wrong because result-set caching is for performance.

Answer

Use PolyBase to load data from external sources.

Answer

Enable result-set caching for query performance.

Answer

Configure workload classification for resource governance.

Question 8

Your company uses Azure Data Lake Storage Gen2 and needs to implement a data retention policy that automatically deletes files older than 90 days in a specific container. What should you use?

Accepted Answer

Azure Storage lifecycle management rule with a filter for the container and a delete action after 90 days.. Option B is correct because Azure Storage lifecycle management policies can automatically delete blobs based on age. Option A is wrong because Azure Purview is for governance, not deletion. Option C is wrong because Azure Data Factory can be scheduled to delete, but lifecycle management is simpler. Option D is wrong because Azure Policy enforces rules, not automated deletion.

Answer

Azure Data Factory pipeline with a Delete activity scheduled to run daily.

Answer

Azure Policy with a deny effect for files older than 90 days.

Answer

Azure Purview data lifecycle policy.

Question 9

You are running an Azure Stream Analytics job that reads from an Event Hub and writes to a Power BI dataset. The job is falling behind and processing latency is increasing. What should you do to improve performance?

Accepted Answer

Increase the number of Streaming Units (SUs) allocated to the job.. Option D is correct because increasing the Streaming Units (SUs) allocates more compute resources to the job, improving throughput. Option A (change output to blob) changes architecture. Option B (decrease event size) is not always possible. Option C (use reference data) does not affect throughput.

Answer

Use a reference data input to filter events.

Answer

Change the output to Azure Blob Storage instead of Power BI.

Answer

Decrease the size of events sent to the Event Hub.

Question 10

A company uses Azure Data Lake Storage Gen2 with hierarchical namespace enabled. They need to restrict a specific application's access to only write files in a particular directory without being able to read or list files. Which type of permission should be assigned?

Accepted Answer

Configure an access control list (ACL) that grants execute and write permissions to the application's service principal.. Option C is correct because POSIX-style ACLs allow granular permissions like write-only. Option A is wrong because RBAC roles like Storage Blob Data Contributor include read and list permissions. Option B is wrong because SAS tokens can be scoped but not to write-only at directory level easily. Option D is wrong because firewall rules control network access, not permissions.

Answer

Configure a firewall rule to allow only the application's IP address.

Answer

Generate a shared access signature (SAS) with write and list permissions.

Answer

Assign the Storage Blob Data Contributor role at the storage account level.

Question 11

You are reviewing an Azure Data Factory pipeline JSON that copies data from Azure Blob Storage to Azure SQL Database using a stored procedure. The pipeline fails with a 'Parameter supplied for object is not valid' error. What is the most likely cause?

Accepted Answer

The stored procedure parameters are not mapped to source columns.. Option B is correct because the stored procedure parameter 'Param1' is defined with a static string value 'value1', but the copy activity should map source columns to stored procedure parameters. Option A is wrong because the source type is valid. Option C is wrong because dataset references are correctly structured. Option D is wrong because the error is about parameters, not dataset names.

Answer

The source type 'BlobSource' is not compatible with Azure Blob Storage.

Answer

The SQL table type 'dbo.InsertType' does not exist.

Answer

The dataset references are incorrect.

Question 12

You are optimizing an Azure Synapse Analytics dedicated SQL pool. The pool has a large fact table distributed by hash on CustomerID. Most queries filter on OrderDate. You need to improve query performance for date-range queries without changing the distribution. What should you do?

Accepted Answer

Partition the table on OrderDate. Adding a partition on OrderDate allows partition elimination, reducing data scanned. Distribution remains unchanged. Option A is wrong because changing to round-robin would increase data movement. Option B is wrong because adding indexes is not supported in dedicated SQL pool (only clustered columnstore indexes are used). Option D is wrong because materialized views can help but are not specifically for date-range filtering on a large table; partition elimination is more direct.

Answer

Change the distribution to round-robin on OrderDate

Answer

Create a materialized view on OrderDate

Answer

Create a non-clustered index on OrderDate

Question 13

You need to monitor the performance of Azure Synapse Analytics dedicated SQL pool queries. Which Azure service should you use to identify long-running queries and resource bottlenecks?

Accepted Answer

Azure Synapse Studio monitoring hub and dynamic management views (DMVs).. Option A is correct because SQL pool monitoring provides DMVs and metrics for query performance. Option B is wrong because Azure Monitor Logs can be used but is not the primary tool for live query monitoring. Option C is wrong because Log Analytics requires setting up data collection. Option D is wrong because Microsoft Purview is for data governance, not performance monitoring.

Answer

Microsoft Purview Data Map.

Answer

Azure Log Analytics queries.

Answer

Azure Monitor Workbooks.

Question 14

You are designing a data lake in Azure Data Lake Storage Gen2 for a large enterprise. You need to ensure that only authorized users can access the data, and you must implement the principle of least privilege. Which security mechanism should you use to grant fine-grained access to specific directories and files without modifying the underlying storage account firewall settings?

Accepted Answer

Azure RBAC roles combined with POSIX-like ACLs. Option D is correct because Azure RBAC with ACLs allows fine-grained permissions at the directory and file level. Option A is wrong because SAS tokens grant time-limited access but are not fine-grained. Option B is wrong because managed identities provide identity-based access but still require RBAC or ACLs for fine-grained control. Option C is wrong because firewall rules apply at the account level, not directory/file level.

Answer

Managed identities for Azure resources

Answer

Storage account firewall rules

Answer

Shared access signatures (SAS)

Question 15

Your company uses Azure Data Lake Storage Gen2 with hierarchical namespace enabled. You need to optimize costs for a large dataset that is accessed only once a month for reporting. The data must be retained for 7 years. Which storage tier and lifecycle management rule should you configure?

Accepted Answer

Cool tier with lifecycle policy to Archive after 30 days. Option C is correct because Cool storage is cost-effective for infrequent access, and a lifecycle policy moving to Archive after 30 days minimizes costs while retaining data for 7 years. Option A (Hot) is expensive for infrequent access. Option B (Premium) is for high throughput. Option D (Archive immediately) incurs high retrieval costs for monthly access.

Answer

Hot tier with no lifecycle policy

Answer

Premium tier with lifecycle policy to Cool after 30 days

Answer

Archive tier with no lifecycle policy