DP-203 Practice Test 37 — 15 Questions

Question 1

Refer to the exhibit. You are reviewing an ARM template for an Azure Data Lake Storage Gen2 account. Which of the following security best practices is violated in this template?

Accepted Answer

The account allows HTTP traffic and uses an outdated TLS version. Setting supportsHttpsTrafficOnly to false allows HTTP traffic, which is insecure. Also, minimumTlsVersion TLS1_0 is outdated and insecure. Option A is wrong because HNS is enabled correctly. Option B is wrong because Standard_LRS is a valid SKU. Option D is wrong because location is correct.

Answer

The location should be fixed instead of using resourceGroup().location

Answer

The SKU should be Standard_GRS for disaster recovery

Answer

The account does not enable hierarchical namespace (HNS)

Question 2

Your Azure Synapse Analytics pipeline uses PolyBase to load data from Azure Blob Storage into a dedicated SQL pool. The load is slow and suffers from high latency. Which optimization should you apply first?

Accepted Answer

Use a round-robin distribution for the staging table.. Option C is correct because using a round-robin distribution for staging tables avoids data movement during load. Option A is wrong because increasing DWU may help but is not the first optimization. Option B is wrong because file splitting can improve parallelism but may not address latency. Option D is wrong because columnstore indexes are for read performance, not load speed.

Answer

Split the source files into smaller chunks.

Answer

Increase the DWU (Data Warehouse Units) of the SQL pool.

Answer

Create clustered columnstore indexes on the staging table.

Question 3

You need to ensure that sensitive data stored in Azure SQL Database is encrypted at rest. Which feature should you enable?

Accepted Answer

Transparent Data Encryption (TDE). Option C is correct because Transparent Data Encryption (TDE) encrypts data at rest. Option A is wrong because Always Encrypted encrypts data in use and in transit, not at rest. Option B is wrong because Dynamic Data Masking masks data in query results. Option D is wrong because Azure Information Protection is a classification and labeling service.

Answer

Always Encrypted

Answer

Azure Information Protection

Answer

Dynamic Data Masking

Question 4

Your team is troubleshooting slow query performance on a dedicated SQL pool in Azure Synapse Analytics. The query uses a hash-distributed fact table with 60 distributions. After reviewing the execution plan, you notice a high number of data moves. Which action would most likely reduce data movement?

Accepted Answer

Redistribute the fact table on the join column using hash distribution.. Option C is correct because aligning the distribution key of the fact table with the join column in a hash-distributed table keeps matching rows on the same distribution, minimizing data movement. Option A is wrong because changing to round-robin can increase data movement for joins. Option B is wrong because increasing distributions requires rebuilding the table and does not guarantee reduced movement. Option D is wrong because statistics help the optimizer but do not directly reduce movement.

Answer

Change the distribution type to round-robin.

Answer

Update statistics on all columns used in joins.

Answer

Increase the number of distributions to 120.

Question 5

You are reviewing an Azure Data Factory JSON definition for a linked service. The linked service uses a service principal to connect to Azure Data Lake Storage Gen1. What is a security concern with this configuration?

Accepted Answer

The service principal key is stored as a SecureString but is visible in the JSON definition.. Option B is correct because storing the service principal key as plain text in the JSON is insecure. Option A is wrong because using Data Lake Storage Gen1 is not a security concern. Option C is wrong because service principal authentication is acceptable. Option D is wrong because subscription and resource group are necessary for resource management.

Answer

The subscription ID and resource group are specified.

Answer

The linked service uses a service principal instead of a managed identity.

Answer

Using Azure Data Lake Storage Gen1 instead of Gen2.

Question 6

You are designing a data processing solution using Azure Databricks with Delta Live Tables (DLT). The solution must handle late-arriving data and ensure that updates to the delta table are processed exactly once. Which DLT pipeline setting should you configure?

Accepted Answer

Configure the DLT pipeline with 'Delta Live Tables' and use 'APPLY CHANGES INTO' with a watermark.. Option D is correct because DLT pipelines support exactly-once processing and handle late data via watermarking and append-only or update modes. Option A is wrong because 'Trigger once' processes data one time only, not continuous. Option B is wrong because 'Continuous' mode processes data as it arrives but may not guarantee exactly-once without proper configuration. Option C is wrong because 'File arrival' is not a DLT setting.

Answer

Set the pipeline mode to 'Trigger once'.

Answer

Set the pipeline mode to 'Continuous' and enable 'Exactly once' delivery.

Answer

Use Auto Loader with 'file arrival' mode.

Question 7

You need to ensure that an Azure Data Factory pipeline retries a failed activity up to three times with a 5-minute delay between retries. How should you configure the activity?

Accepted Answer

Set retry to 3 and retryIntervalInSeconds to 300 in the activity policy. The retry property in activity policy sets the number of retries, and retryIntervalInSeconds sets the delay. Option B is wrong because there is no 'maxRetries' property; it's 'retry'. Option C is wrong because 'retryPolicy' is not a property; retry is at the activity level. Option D is wrong because timeout is separate from retry.

Answer

Configure the Retry policy on the pipeline activity as 'Exponential' with count 3

Answer

Set the activity timeout to 15 minutes and enable retry

Answer

Set maxRetries to 3 and delay to 5 minutes in the pipeline JSON

Question 8

You have an Azure Databricks workspace that processes sensitive data. The security team requires that all access to the workspace be authenticated using Microsoft Entra ID and that all API calls be audited. Which configuration should you implement?

Accepted Answer

Configure workspace to use Microsoft Entra ID authentication and enable diagnostic settings for audit logs.. Option C is correct because Microsoft Entra ID authentication is required, and diagnostic settings audit API calls. Option A is wrong because VNet injection is for network isolation, not authentication or auditing. Option B is wrong because personal access tokens bypass Entra ID. Option D is wrong because Azure Private Link is for private connectivity.

Answer

Enable VNet injection and configure network security groups.

Answer

Deploy Azure Private Link and disable public access.

Answer

Configure personal access tokens for API access and enable cluster logs.

Question 9

Your Azure Synapse Analytics dedicated SQL pool is experiencing performance degradation. You suspect that the workload is generating excessive data movement due to suboptimal distribution. Which dynamic management view (DMV) should you query to identify queries that are causing significant data movement?

Accepted Answer

sys.dm_pdw_exec_requests. Option B is correct because sys.dm_pdw_exec_requests shows query steps including data movement operations. Option A is wrong because sys.dm_pdw_node_status shows node health. Option C is wrong because sys.dm_pdw_errors shows error details. Option D is wrong because sys.dm_pdw_waits shows wait states.

Answer

sys.dm_pdw_node_status

Answer

sys.dm_pdw_errors

Answer

sys.dm_pdw_waits

Question 10

You need to monitor an Azure Data Factory pipeline for failures and send an email notification when a pipeline run fails. Which Azure service should you use to create an alert based on the pipeline run metrics?

Accepted Answer

Azure Monitor. Option A is correct because Azure Monitor can create alerts based on ADF metrics like 'Failed pipeline runs'. Option B is wrong because Azure Service Health monitors Azure service health, not pipeline runs. Option C is wrong because Azure Log Analytics is for log queries, not alerting. Option D is wrong because Microsoft Sentinel is for security.

Answer

Microsoft Sentinel

Answer

Azure Service Health

Answer

Azure Log Analytics

Question 11

You are designing a data pipeline that uses Azure Data Factory to copy data from an Azure SQL database to Azure Data Lake Storage Gen2. The data contains personally identifiable information (PII) that must be masked. Which Data Factory feature should you use?

Accepted Answer

Use a mapping data flow to apply a mask transformation on PII columns.. Option B is correct because Data Factory data flows allow column-level transformations including data masking. Option A is wrong because copy activity only copies data without transformation. Option C is wrong because stored procedures run on the source, not during copy. Option D is wrong because staging is for bulk copy performance, not masking.

Answer

Use a copy activity with a query to select only non-PII columns.

Answer

Use a stored procedure activity to mask data in the source before copy.

Answer

Enable staging on the copy activity to use PolyBase.

Question 12

You have an Azure Synapse Analytics workspace with Apache Spark pools. You need to monitor Spark application performance and identify stages that are taking the longest time. Which tool should you use?

Accepted Answer

Use the Spark UI available in Synapse Studio.. Option A is correct because the Spark UI provides detailed information about stages, tasks, and executors. Option B is wrong because Azure Monitor metrics provide aggregate metrics but not stage-level details. Option C is wrong because Log Analytics queries can analyze logs but not as directly as Spark UI. Option D is wrong because Synapse Studio provides a job view but not as granular as Spark UI.

Answer

Run KQL queries in Log Analytics against Spark logs.

Answer

Query Azure Monitor metrics for the Spark pool.

Answer

Use the Synapse Pipeline monitoring view.

Question 13

Which TWO configurations are recommended to secure data processing in Azure Synapse Pipelines?

Accepted Answer

Store connection strings and secrets in Azure Key Vault and reference them via linked services.. Option B is correct: Managed VNet ensures data integration runs in a secure network boundary. Option D is correct: Azure Key Vault integration stores secrets securely. Option A is incorrect: Public endpoint access reduces security. Option C is incorrect: Auto-resolve integration runtime may use public endpoints. Option E is incorrect: Self-hosted IR is for on-premises, not for cloud security.

Answer

Configure a self-hosted integration runtime on a public cloud VM.

Answer

Use the default Auto-resolve Integration Runtime for all data flows.

Answer

Allow all public IP addresses to access the Azure Synapse workspace.

Question 14

You are configuring Azure Synapse Analytics dedicated SQL pool. To optimize query performance for a large fact table that is frequently filtered on date and region columns, which table distribution and indexing strategy should you recommend?

Accepted Answer

Hash distribution on region column with clustered columnstore index.. Option B is correct because hash distribution on region spreads data evenly if region has high cardinality, and clustered columnstore index is optimal for large fact tables. Option A is wrong because round-robin distribution is for staging tables. Option C is wrong because heap index is for temporary data. Option D is wrong because replicated distribution is for small dimension tables.

Answer

Hash distribution on date column with clustered index.

Answer

Replicated distribution with heap index.

Answer

Round-robin distribution with clustered index.

Question 15

You are designing a data processing solution in Azure Synapse Analytics. The solution must ensure that sensitive columns containing personally identifiable information (PII) are masked at query time for users without explicit permissions. Which Azure Synapse Analytics feature should you use?

Accepted Answer

Dynamic Data Masking. Dynamic Data Masking (DDM) is the correct feature because it obfuscates sensitive data in query results for users without the UNMASK permission. Option A is wrong because Always Encrypted protects data at rest and in transit but requires client-side changes. Option C is wrong because Row-Level Security restricts rows, not columns. Option D is wrong because Transparent Data Encryption encrypts the entire database at rest.

Answer

Row-Level Security

Answer

Transparent Data Encryption

Answer

Always Encrypted

DP-203 Practice Test 37 — 15 Questions

Exhibit

DP-203 Practice Test 37 — 15 Questions

Exhibit