Secure, monitor, and optimize data storage and data processing →mediumMultiple ChoiceObjective-mapped
DP-203 Practice Question: Secure, monitor, and optimize data storage and data processing
Exhibit
Refer to the exhibit.
{
"identity": {
"type": "UserAssigned",
"userAssignedIdentities": {
"/subscriptions/.../resourceGroups/rg1/providers/Microsoft.ManagedIdentity/userAssignedIdentities/mi-etl": {}
}
},
"properties": {
"linkedServices": [
{
"name": "ls_storage",
"type": "AzureStorage",
"typeProperties": {
"connectionString": "DefaultEndpointsProtocol=https;AccountName=mystorage;AccountKey=mykey"
}
}
]
}
}Refer to the exhibit. You are reviewing a Data Factory JSON definition. The factory has a user-assigned managed identity configured. However, the linked service to Azure Storage uses an account key. What security improvement should you recommend?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Modify the linked service to use the managed identity for authentication
The recommended security improvement is to modify the linked service to use the managed identity for authentication (option B). The user-assigned managed identity is already configured but not being used; instead, the linked service is using an account key, which requires storing a secret. Using the managed identity eliminates the need for secrets and leverages Azure AD authentication, which is more secure and easier to manage. Option A (firewall rule) addresses network access but not authentication. Option C (remove managed identity and use service principal) would replace one identity-based approach with another, but the managed identity is already in place and should be utilized. Option D (store key in Key Vault) still involves storing a secret, which is less secure than using the managed identity directly when possible.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Add a firewall rule to limit access to the storage account
Why it's wrong here
Firewall does not address the use of account key.
- ✓
Modify the linked service to use the managed identity for authentication
Why this is correct
Managed identity eliminates the need for account key.
- ✗
Remove the managed identity and use a service principal
Why it's wrong here
Managed identity is already more secure than service principal (no credential management).
- ✗
Keep the account key but store it in Azure Key Vault
Why it's wrong here
Key Vault is better than hardcoding, but managed identity is even more secure.
Go deeper
Related to this question
About these practice questions
This DP-203 question is part of Courseiva's 760-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-203 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-203 exam.