Question 1mediummultiple choice
Read the full Secure, monitor, and optimize data storage and data processing explanation →DP-203 Secure, monitor, and optimize data storage and data processing • Complete Question Bank
Complete DP-203 Secure, monitor, and optimize data storage and data processing question bank — all 0 questions with answers and detailed explanations.
Refer to the exhibit.
{
"properties": {
"encryption": {
"keySource": "Microsoft.Keyvault",
"keyVaultProperties": {
"keyName": "mykey",
"keyVersion": "",
"keyVaultUri": "https://myvault.vault.azure.net/"
},
"infrastructureEncryption": "Enabled"
}
}
}Refer to the exhibit.
GET https://mysynapse.azuresynapse.net/monitoring/workloadManagement/workloadClassifiers?api-version=2020-12-01
Response:
{
"value": [
{
"name": "HeavyLoader",
"properties": {
"memberName": "LoaderGroup",
"wlmContext": {
"importance": "high",
"minPercentageResource": 30,
"maxPercentageResource": 100,
"capPercentageResource": 60,
"queryExecutionTimeoutSeconds": 0
}
}
},
{
"name": "ReportUser",
"properties": {
"memberName": "ReportGroup",
"wlmContext": {
"importance": "normal",
"minPercentageResource": 10,
"maxPercentageResource": 100,
"capPercentageResource": 50,
"queryExecutionTimeoutSeconds": 3600
}
}
}
]
}Refer to the exhibit.
{
"properties": {
"rules": [
{
"name": "AuditPolicy",
"description": "Audit all events",
"ruleState": "Enabled",
"source": {
"include": ["*"],
"exclude": []
},
"target": {
"include": ["*"],
"exclude": []
},
"filter": {
"predicate": "true"
},
"actions": [
{
"actionGroup": "ALL_ACTIONS"
}
]
}
]
}
}Refer to the exhibit.
{
"permissions": [
{
"principal": "user@contoso.com",
"role": "Storage Blob Data Contributor",
"scope": "/"
},
{
"principal": "group-analysts@contoso.com",
"role": "Storage Blob Data Reader",
"scope": "/data/analytics/"
}
]
}Refer to the exhibit.
{
"identity": {
"type": "SystemAssigned",
"principalId": "00000000-0000-0000-0000-000000000001",
"tenantId": "00000000-0000-0000-0000-000000000002"
},
"properties": {
"encryption": {
"keyVaultProperties": {
"keyVaultUri": "https://mykeyvault.vault.azure.net/",
"keyName": "mykey",
"keyVersion": "1"
},
"infrastructureEncryption": "Enabled"
}
}
}Refer to the exhibit.
{
"triggers": [
{
"name": "DailyTrigger",
"properties": {
"type": "ScheduleTrigger",
"typeProperties": {
"recurrence": {
"frequency": "Day",
"interval": 1,
"startTime": "2024-01-01T00:00:00Z",
"timeZone": "UTC"
}
},
"pipelines": [
{
"pipelineReference": {
"referenceName": "CopyPipeline"
},
"parameters": {}
}
]
}
},
{
"name": "BlobTrigger",
"properties": {
"type": "BlobEventsTrigger",
"typeProperties": {
"blobPathBeginsWith": "/input/",
"events": ["Microsoft.Storage.BlobCreated"]
},
"pipelines": [
{
"pipelineReference": {
"referenceName": "ProcessPipeline"
},
"parameters": {}
}
]
}
}
]
}Refer to the exhibit.
{
"Name": "audit-policy",
"Type": "Microsoft.Sql/servers/auditingSettings",
"ApiVersion": "2021-11-01",
"Properties": {
"state": "Enabled",
"storageEndpoint": "https://auditlogs.blob.core.windows.net",
"retentionDays": 90,
"auditActionsAndGroups": [
"DATABASE_LOGOUT_GROUP",
"DATABASE_ROLE_MEMBER_CHANGE_GROUP"
]
}
}Refer to the exhibit.
{
"properties": {
"resource": {
"type": "Microsoft.Sql/servers/databases/securityAlertPolicies",
"apiVersion": "2021-11-01",
"name": "Default",
"properties": {
"state": "Enabled",
"emailAddresses": ["admin@contoso.com", "sec@contoso.com"],
"emailAccountAdmins": true,
"disabledAlerts": ["Sql_Injection", "Access_Anomaly"]
}
}
}
}Refer to the exhibit.
{
"type": "Microsoft.DataFactory/factories/pipelines",
"properties": {
"activities": [
{
"name": "CopyData",
"type": "Copy",
"inputs": [{"referenceName": "SourceDataset", "type": "DatasetReference"}],
"outputs": [{"referenceName": "SinkDataset", "type": "DatasetReference"}],
"typeProperties": {
"source": {
"type": "DelimitedTextSource",
"storeSettings": {
"type": "AzureBlobStorageReadSettings",
"recursive": true
}
},
"sink": {
"type": "DelimitedTextSink",
"storeSettings": {
"type": "AzureBlobStorageWriteSettings",
"copyBehavior": "FlattenHierarchy"
}
},
"enableStaging": false,
"dataIntegrationUnits": 4
}
}
]
}
}Refer to the exhibit.
CREATE MASTER KEY ENCRYPTION BY PASSWORD = 'MyStr0ngP@ssw0rd!';
CREATE DATABASE SCOPED CREDENTIAL SasCredential
WITH IDENTITY = 'SHARED ACCESS SIGNATURE',
SECRET = '?sv=2020-08-04&ss=b&srt=sco&sp=rl&se=2025-12-31T23:59:59Z&st=2025-01-01T00:00:00Z&spr=https&sig=...';
CREATE EXTERNAL DATA SOURCE MyDataSource WITH (
LOCATION = 'wasbs://mycontainer@mystorageaccount.blob.core.windows.net',
CREDENTIAL = SasCredential
);Refer to the exhibit.
{
"name": "My Policy",
"policyRule": {
"if": {
"field": "type",
"equals": "Microsoft.Storage/storageAccounts"
},
"then": {
"effect": "deny",
"details": {
"field": "Microsoft.Storage/storageAccounts/blobProperties.defaultServiceVersion",
"notEquals": "2020-10-02"
}
}
}
}Refer to the exhibit.
{
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"resources": [
{
"type": "Microsoft.Storage/storageAccounts",
"apiVersion": "2021-02-01",
"name": "[parameters('storageAccountName')]",
"location": "[resourceGroup().location]",
"kind": "StorageV2",
"sku": {
"name": "Standard_LRS"
},
"properties": {
"isHnsEnabled": true
}
}
]
}Refer to the exhibit. KQL Query: ADXTable | where Timestamp > ago(1h) | summarize count() by bin(Timestamp, 5m) | render timechart
Refer to the exhibit.
{
"type": "Microsoft.Authorization/roleAssignments",
"apiVersion": "2020-04-01-preview",
"name": "[guid(resourceGroup().id, 'Storage Blob Data Contributor')]",
"properties": {
"roleDefinitionId": "[subscriptionResourceId('Microsoft.Authorization/roleDefinitions', 'ba92f5b4-2d11-453d-a403-e96b0029c9fe')]",
"principalId": "[parameters('principalId')]",
"scope": "[resourceGroup().id]"
}
}Refer to the exhibit.
{
"properties": {
"policyRule": {
"if": {
"field": "type",
"equals": "Microsoft.Storage/storageAccounts"
},
"then": {
"effect": "deny",
"details": {
"field": "Microsoft.Storage/storageAccounts/networkAcls.defaultAction",
"equals": "Allow"
}
}
}
}
}Refer to the exhibit.
$properties = @{
"IsTransactional" = $true
"PartitionCount" = 10
"CleanupMode" = "Automatic"
}
Set-AzSynapseSqlPool -WorkspaceName "ws1" -Name "sqlpool1" -AutoPauseDelayInMinutes 15 -Property $propertiesRefer to the exhibit.
{
"dataSources": [
{
"kind": "AzureDataExplorer",
"name": "adx1",
"properties": {
"resourceId": "/subscriptions/.../resourceGroups/rg1/providers/Microsoft.Kusto/clusters/adx1",
"region": "eastus",
"database": "db1"
}
}
],
"scans": [
{
"kind": "AzureDataExplorer",
"name": "scan1",
"dataSource": "adx1"
}
]
}Refer to the exhibit.
{
"type": "Microsoft.Security/automations",
"apiVersion": "2020-01-01",
"properties": {
"description": "Monitor for high-severity alerts",
"isEnabled": true,
"actions": [
{
"actionType": "EventHub",
"eventHubResourceId": "/subscriptions/.../resourceGroups/rg1/providers/Microsoft.EventHub/namespaces/ehns1/eventhubs/eh1",
"connectionString": "Endpoint=sb://..."
}
],
"scopes": [
"/subscriptions/.../resourceGroups/rg1"
],
"sources": [
{
"ruleId": "HighSeverityAlerts",
"severity": "High"
}
]
}
}Refer to the exhibit.
{
"dataSources": [
{
"name": "SalesData",
"type": "AzureDataLakeStore",
"properties": {
"tenant": "contoso.onmicrosoft.com",
"dataLakeStoreUri": "https://salesdls.azuredatalakestore.net/webhdfs/v1",
"servicePrincipalId": "11111111-1111-1111-1111-111111111111",
"servicePrincipalKey": {
"type": "SecureString",
"value": "********"
},
"subscriptionId": "22222222-2222-2222-2222-222222222222",
"resourceGroupName": "SalesRG"
}
}
]
}Refer to the exhibit. $storageAccount = Get-AzStorageAccount -ResourceGroupName 'rg-datalake' -Name 'stdatalake001' $ctx = $storageAccount.Context $fileSystem = 'data' $path = 'sales/2024/01/' $acl = Set-AzDataLakeGen2ItemAclObject -EntityId 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx' -Permission 'rwx' -AccessControlType 'user' -DefaultScope Update-AzDataLakeGen2Item -FileSystem $fileSystem -Path $path -Acl $acl -Context $ctx
Refer to the exhibit.
{
"name": "CopyDataPipeline",
"properties": {
"activities": [
{
"name": "CopyFromBlobToSQL",
"type": "Copy",
"inputs": [{"referenceName": "BlobInput", "type": "DatasetReference"}],
"outputs": [{"referenceName": "SQLOutput", "type": "DatasetReference"}],
"typeProperties": {
"source": {
"type": "BlobSource"
},
"sink": {
"type": "SqlSink",
"sqlWriterStoredProcedureName": "usp_InsertData",
"sqlWriterTableType": "dbo.InsertType",
"storedProcedureParameters": {
"Param1": {
"value": "value1"
}
}
}
}
}
]
}
}Refer to the exhibit.
{
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"resources": [
{
"type": "Microsoft.Storage/storageAccounts",
"apiVersion": "2022-09-01",
"name": "[parameters('storageAccountName')]",
"location": "[resourceGroup().location]",
"kind": "StorageV2",
"sku": {
"name": "Standard_LRS"
},
"properties": {
"supportsHttpsTrafficOnly": false,
"minimumTlsVersion": "TLS1_0",
"isHnsEnabled": true
}
}
]
}Refer to the exhibit.
{
"identity": {
"type": "UserAssigned",
"userAssignedIdentities": {
"/subscriptions/.../resourceGroups/rg1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/mi-etl": {}
}
},
"properties": {
"linkedServices": [
{
"name": "ls_storage",
"type": "AzureStorage",
"typeProperties": {
"connectionString": "DefaultEndpointsProtocol=https;AccountName=mystorage;AccountKey=mykey"
}
}
]
}
}Refer to the exhibit. KQL query: AzureDiagnostics | where ResourceProvider == "MICROSOFT.DATAFACTORY" | where Category == "ActivityRuns" | where Status == "Failed" | summarize count() by PipelineName, bin(TimeGenerated, 1h) | order by count_ desc
{
"roleName": "Custom Lake Reader",
"assignableScopes": ["/subscriptions/.../resourceGroups/rg-data/providers/Microsoft.Storage/storageAccounts/datalake001"],
"permissions": [
{
"actions": [
"Microsoft.Storage/storageAccounts/blobServices/containers/read"
],
"notActions": [],
"dataActions": [
"Microsoft.Storage/storageAccounts/blobServices/containers/blobs/read"
],
"notDataActions": []
}
]
}{
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
"resources": [
{
"type": "Microsoft.Storage/storageAccounts",
"apiVersion": "2023-01-01",
"name": "storagedatalakeprod",
"kind": "StorageV2",
"properties": {
"isHnsEnabled": true,
"encryption": {
"keySource": "Microsoft.Keyvault",
"keyvaultproperties": {
"keyuri": "https://kv-prod.vault.azure.net/keys/datalake-key/abc123"
}
},
"networkAcls": {
"defaultAction": "Deny",
"virtualNetworkRules": [
{
"id": "/subscriptions/.../virtualNetworks/vnet-prod/subnets/subnet-databricks"
}
],
"ipRules": []
}
}
}
]
}Refer to the exhibit.
{
"encryption": {
"keySource": "Microsoft.Keyvault",
"keyvaultproperties": {
"keyvaulturi": "https://mykeyvault.vault.azure.net/",
"keyname": "mykey",
"keyversion": "1"
}
}
}Refer to the exhibit.
```json
{
"name": "CopyData",
"properties": {
"activities": [
{
"name": "Copy from Blob to SQL",
"type": "Copy",
"inputs": [{"referenceName": "BlobDataset", "type": "DatasetReference"}],
"outputs": [{"referenceName": "SQLDataset", "type": "DatasetReference"}],
"typeProperties": {
"source": {
"type": "BlobSource",
"recursive": true
},
"sink": {
"type": "SqlSink",
"writeBatchSize": 10000,
"preCopyScript": "TRUNCATE TABLE dbo.Staging"
}
}
}
]
}
}
```You are a data engineer for a large e-commerce company. You have an Azure Synapse Analytics dedicated SQL pool that stores transactional data. The pool is currently at DWU1000c. You have a critical dashboard that runs a complex query every 5 minutes. The query scans a large fact table partitioned by date. The query performance is degrading over time as data accumulates. You need to improve performance without increasing DWUs or changing the dashboard query. You also need to minimize data movement overhead. You have the following options:
A. Create a columnstore index on the fact table with a partition alignment. B. Create a materialized view that aggregates the data at the partition level. C. Implement result-set caching and set the cache to expire every 5 minutes. D. Redistribute the fact table using hash distribution on the date column.
Which option should you choose?
{
"type": "Microsoft.Authorization/policyDefinitions",
"properties": {
"displayName": "Audit diagnostic setting for Azure Data Lake Storage Gen2",
"policyType": "Custom",
"description": "Audit if diagnostic setting is not configured for Data Lake Storage Gen2",
"parameters": {
"effect": {
"type": "String",
"allowedValues": ["AuditIfNotExists", "Deny", "Disabled"],
"defaultValue": "AuditIfNotExists"
}
},
"policyRule": {
"if": {
"field": "type",
"equals": "Microsoft.Storage/storageAccounts"
},
"then": {
"effect": "[parameters('effect')]",
"details": {
"type": "Microsoft.Insights/diagnosticSettings",
"existenceCondition": {
"field": "Microsoft.Insights/diagnosticSettings/logs[*].category",
"equals": "StorageRead"
}
}
}
}
}
}