DP-203 Practice Test 35 — 15 Questions

Question 1

You are monitoring an Azure Synapse Analytics dedicated SQL pool and notice that queries are experiencing excessive wait time due to concurrency slots being exhausted. What is the recommended approach to improve concurrency without increasing cost?

Accepted Answer

Classify queries using workload classification and assign lower importance to reduce concurrency slot usage.. Option C is correct because using workload classification and assigning a lower importance to background queries can allow critical queries to run while reducing slot consumption for non-critical ones. Option A is wrong because scaling up increases cost and may not be necessary. Option B is wrong because workload groups can limit resources but do not directly increase concurrency slots. Option D is wrong because changing distribution does not affect concurrency slots.

Answer

Create additional workload groups and assign queries to them.

Answer

Scale up the dedicated SQL pool to a higher service level.

Answer

Change the distribution type of tables to round-robin.

Question 2

You need to ensure that an Azure Data Factory pipeline can copy data from an Azure SQL Database that is behind a private endpoint. The Data Factory should use a managed virtual network. What should you configure?

Accepted Answer

Enable managed virtual network for the Data Factory and create a managed private endpoint for the SQL Database.. Option C is correct because a managed private endpoint in the Data Factory's managed virtual network allows secure access to the SQL Database's private endpoint. Option A is wrong because the integration runtime must be in the same virtual network. Option B is wrong because self-hosted IR is for on-premises data sources. Option D is wrong because Azure Bastion is for VM access, not data factory.

Answer

Install a self-hosted integration runtime on a VM in the same virtual network.

Answer

Use the default Azure integration runtime.

Answer

Use Azure Bastion to connect the Data Factory to the SQL Database.

Question 3

Which THREE methods can you use to monitor and optimize the performance of an Azure Data Lake Storage Gen2 account?

Accepted Answer

Enable Azure Monitor metrics for the storage account.. Options A, C, and D are correct. Azure Monitor metrics provide performance data; Storage Analytics logs (classic) give request details; lifecycle management optimizes costs by tiering. Option B (Azure SQL Analytics) is for SQL databases. Option E (Azure Advisor) provides recommendations but is not a monitoring method per se; it's an advisory tool.

Answer

Use Azure Advisor to get performance recommendations.

Answer

Use Azure SQL Analytics to query storage logs.

Question 4

Your team is running a critical Azure Stream Analytics job that writes results to Azure SQL Database. Recently, the job has been failing with high latency and occasional data loss. You need to monitor the job's performance and set up alerts for when the watermark delay exceeds a threshold. What should you use?

Accepted Answer

Azure Monitor metrics for the Stream Analytics job.. Option A is correct because Azure Stream Analytics provides job metrics in Azure Monitor, including watermark delay. Option B is wrong because Log Analytics can store logs but not directly show Stream Analytics metrics. Option C is wrong because Application Insights is for application monitoring, not Stream Analytics. Option D is wrong because Azure Data Explorer is not for monitoring Stream Analytics.

Answer

Application Insights SDK integration in the job.

Answer

Azure Log Analytics workspace connected to the job diagnostics logs.

Answer

Azure Data Explorer for querying job performance data.

Question 5

Your company uses Azure Data Lake Storage Gen2. You need to ensure that data at rest is encrypted using a customer-managed key stored in Azure Key Vault. What should you configure?

Accepted Answer

Enable 'Azure Storage encryption' with customer-managed keys in the storage account's encryption blade.. Option A is correct because Azure Storage encryption with customer-managed keys is configured at the storage account level. Option B is wrong because infrastructure encryption is an additional layer. Option C is wrong because client-side encryption is done by the application, not at rest. Option D is wrong because Azure Policy can enforce encryption but does not configure it.

Answer

Use Azure Policy to audit storage accounts without encryption.

Answer

Implement client-side encryption in the application code.

Answer

Enable 'Infrastructure encryption' for double encryption.

Question 6

Which TWO actions should you take to secure data at rest in Azure Data Lake Storage Gen2?

Accepted Answer

Enable Azure Storage Service Encryption (SSE) for data at rest. Enabling encryption at rest (Azure Storage Service Encryption) and using Azure RBAC to control access are both security best practices. Option C is wrong because firewall rules are network-level, not data-at-rest. Option D is wrong because soft delete is for recovery, not security. Option E is wrong because diagnostic settings are for auditing, not encryption.

Answer

Enable diagnostic settings to audit access

Answer

Configure firewall rules to restrict network access

Answer

Enable soft delete for blobs

Question 7

You are optimizing an Azure Synapse Analytics dedicated SQL pool. The pool experiences high concurrency and frequent data skew. Which indexing strategy should you recommend to improve query performance for large fact tables?

Accepted Answer

Use hash-distributed tables with round-robin distribution and clustered columnstore indexes.. Option B is correct because hash-distributed round-robin tables distribute data evenly, reducing skew. Option A is wrong because hash-distributed clustered columnstore may still have skew if the distribution column is poorly chosen. Option C is wrong because replicated tables are for small dimension tables. Option D is wrong because heap tables are for staging, not optimized for large fact tables.

Answer

Use hash-distributed tables with clustered columnstore indexes.

Answer

Use replicated tables with clustered indexes.

Answer

Use heap tables with non-clustered indexes.

Question 8

You need to monitor the performance of an Azure Stream Analytics job in real time. Which Azure service should you use to track the job's resource utilization (e.g., SU % utilization) and set up alerts when the job is approaching its capacity?

Accepted Answer

Azure Monitor. Option C is correct because Azure Monitor provides metrics and alerts for Stream Analytics jobs. Option A is wrong because Azure Log Analytics ingests logs but is not primarily for real-time metric alerts. Option B is wrong because Microsoft Sentinel is a SIEM. Option D is wrong because Azure Advisor provides recommendations but not real-time monitoring and alerts for resource utilization.

Answer

Azure Advisor

Answer

Microsoft Sentinel

Answer

Azure Log Analytics

Question 9

You are designing a data processing solution using Azure Stream Analytics. You need to ensure that the output to Azure SQL Database is optimized to minimize the number of write operations. Which output configuration should you use?

Accepted Answer

Use a windowed aggregation to batch writes.. Option D is correct because using a windowed aggregation (e.g., TumblingWindow) reduces the number of writes by batching results. Option A is wrong because increasing batch size alone is not a Stream Analytics configuration. Option B is wrong because partitioning increases parallelism but not necessarily reduces writes. Option C is wrong because the 'All' compatibility level does not optimize write operations.

Answer

Use a partitioned output to distribute writes across multiple tables.

Answer

Set the compatibility level to 1.2.

Answer

Increase the event serialization format batch size.

Question 10

Which TWO actions should you take to ensure that data at rest is encrypted in Azure Synapse Analytics dedicated SQL pool?

Accepted Answer

Enable infrastructure-level encryption using double encryption.. Options A and D are correct. TDE encrypts data at rest for dedicated SQL pool, and enabling double encryption provides additional protection. Option B is wrong because Always Encrypted is for client-side encryption, not at rest. Option C is wrong because column-level encryption is for specific columns, not the whole pool. Option E is wrong because creating a customer-managed key is only part of TDE configuration, not a separate action.

Answer

Enable Always Encrypted with secure enclaves.

Answer

Apply column-level encryption using ENCRYPTBYPASSPHRASE.

Answer

Create a customer-managed key in Azure Key Vault.

Question 11

You are an Azure administrator. You apply the Azure Policy shown in the exhibit to a management group. What is the outcome of this policy?

Accepted Answer

It denies storage accounts that allow public network access.. Option D is correct because the policy denies storage accounts where the default network access is set to 'Allow' (i.e., public access). Option A (denies creation only) is not true; it applies to existing accounts as well via auditing/deny. Option B (allows only HTTPS) is unrelated. Option C (requires firewall) is not stated.

Answer

It allows storage accounts only if they have a firewall rule.

Answer

It requires all storage accounts to use HTTPS only.

Answer

It denies the creation of any new storage account.

Question 12

You are using Azure Data Factory to load data from an on-premises SQL Server to Azure Synapse Analytics. The data size is 500 GB, and you need to minimize the load time. The network bandwidth is limited. Which approach should you use?

Accepted Answer

Use a self-hosted integration runtime and stage the data in Azure Blob Storage before loading to Synapse.. Option A is correct because using a self-hosted integration runtime with staging via Azure Blob Storage allows you to stage the data in Azure and then copy to Synapse, which is faster over limited bandwidth. Option B (copy activity directly) is slower. Option C (Azure Data Lake Storage) is similar but staging is more efficient. Option D (Azure ExpressRoute) requires additional setup and cost.

Answer

Use a self-hosted integration runtime and copy directly to Synapse.

Answer

Use Azure ExpressRoute to improve network bandwidth.

Answer

Use an Azure integration runtime and copy to Azure Data Lake Storage, then to Synapse.

Question 13

You are monitoring Azure Data Factory pipelines. You need to set up an alert when a pipeline run fails. What is the most efficient way to achieve this?

Accepted Answer

Create an Azure Monitor alert based on the 'Failed pipeline runs' metric.. Option A is correct because Azure Monitor alerts can be configured on Data Factory metrics like 'Failed pipeline runs'. Option B is wrong because custom logging in a sink requires additional effort. Option C is wrong because diagnostic settings send logs to a workspace, but alerts are easier with metrics. Option D is wrong because Application Insights is not natively integrated with Data Factory for pipeline runs.

Answer

Add an activity in each pipeline to log failures to a custom table in Log Analytics.

Answer

Enable diagnostic settings to send pipeline runs to a Log Analytics workspace and create a log alert.

Answer

Use Application Insights to monitor pipeline executions.

Question 14

You are designing an Azure Data Factory pipeline to ingest data from an on-premises SQL Server into Azure Synapse Analytics. The data must be encrypted in transit. Which integration runtime type should you use and what additional configuration is required?

Accepted Answer

Use Self-hosted Integration Runtime with a certificate for HTTPS. A self-hosted integration runtime is needed to connect to on-premises networks. To encrypt data in transit, the certificate must be used for HTTPS encryption. Option A is wrong because Azure IR cannot access on-premises directly. Option C is wrong because ExpressRoute provides private connectivity but does not handle encryption at the application layer. Option D is wrong because VPN Gateway is a network-level solution; ADF still needs self-hosted IR.

Answer

Use Azure Integration Runtime with ExpressRoute

Answer

Use Self-hosted Integration Runtime with Azure VPN Gateway

Answer

Use Azure Integration Runtime with a public endpoint

Question 15

Refer to the exhibit. You are reviewing a Data Factory JSON definition. The factory has a user-assigned managed identity configured. However, the linked service to Azure Storage uses an account key. What security improvement should you recommend?

Accepted Answer

Modify the linked service to use the managed identity for authentication. Using the managed identity instead of account key is more secure because it avoids storing secrets. Option A is wrong because the managed identity is already configured but not used. Option B is wrong because firewall rules are separate. Option D is wrong because switching to Key Vault still stores a secret; managed identity is preferred when possible.

Answer

Add a firewall rule to limit access to the storage account

Answer

Remove the managed identity and use a service principal

Answer

Keep the account key but store it in Azure Key Vault