DP-203 Practice Question: Secure, monitor, and optimize data storage and data processing
Contoso Ltd. runs a real-time analytics solution on Azure Databricks with data streaming from Event Hubs. They need to ensure that all data in transit between Event Hubs and Databricks is encrypted using TLS 1.2 or higher. Currently, the Event Hubs namespace is configured with the default TLS version (1.0). The Databricks cluster uses a public endpoint. Compliance requires that only TLS 1.2 is accepted. You need to configure the environment to enforce TLS 1.2 without disrupting ongoing streaming. What should you do?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Update the Event Hubs namespace to require TLS 1.2, then modify the Databricks streaming job's connection string to include 'TransportType=AmqpTls' and restart the streaming job.
To enforce TLS 1.2 without disrupting ongoing streaming, you must first update the Event Hubs namespace to require TLS 1.2 via the 'Minimum TLS version' setting. Then, configure the Databricks streaming job's connection string to include 'TransportType=AmqpTls' to ensure the client uses TLS 1.2. Finally, restart the streaming job to apply the new connection settings. Option A correctly describes these steps. Option B incorrectly suggests rebooting the cluster, which is unnecessary and would disrupt streaming. Option C incorrectly suggests redeploying the cluster with an init script, which is not needed and causes disruption. Option D includes an unnecessary Spark configuration change; the connection string parameter (TransportType=AmqpTls) is sufficient.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Update the Event Hubs namespace to require TLS 1.2, then modify the Databricks streaming job's connection string to include 'TransportType=AmqpTls' and restart the streaming job.
Why this is correct
Enforces TLS 1.2 with minimal disruption.
- ✗
Change the Event Hubs namespace minimum TLS version to 1.2 in the Azure portal, then reboot the Databricks cluster.
Why it's wrong here
Rebooting doesn't update connection settings.
- ✗
In the Event Hubs namespace, set 'Minimum TLS version' to 1.2 and redeploy the Databricks cluster with a new init script that forces TLS 1.2.
Why it's wrong here
Redeployment causes disruption.
- ✗
Use Azure CLI to set the Event Hubs namespace TLS version to 1.2 and update the Databricks cluster's Spark configuration to use TLS 1.2.
Why it's wrong here
Missing restart of streaming job.
Go deeper
Related to this question
About these practice questions
One of 760 original DP-203 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-203 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-203 exam.