Secure, monitor, and optimize data storage and data processing →mediumMultiple ChoiceObjective-mapped
DP-203 Practice Question: Secure, monitor, and optimize data storage and data processing
Exhibit
Refer to the exhibit.
{
"dataSources": [
{
"name": "SalesData",
"type": "AzureDataLakeStore",
"properties": {
"tenant": "contoso.onmicrosoft.com",
"dataLakeStoreUri": "https://salesdls.azuredatalakestore.net/webhdfs/v1",
"servicePrincipalId": "11111111-1111-1111-1111-111111111111",
"servicePrincipalKey": {
"type": "SecureString",
"value": "********"
},
"subscriptionId": "22222222-2222-2222-2222-222222222222",
"resourceGroupName": "SalesRG"
}
}
]
}You are reviewing an Azure Data Factory JSON definition for a linked service. The linked service uses a service principal to connect to Azure Data Lake Storage Gen1. What is a security concern with this configuration?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The service principal key is stored as a SecureString but is visible in the JSON definition.
The service principal key is stored as a SecureString, but in the JSON definition it is visible as plain text, which is a security concern. Option A is incorrect because specifying the subscription ID and resource group is necessary for resource management and not a security issue. Option B is incorrect because using a service principal is a valid and secure authentication method when the key is properly stored. Option C is incorrect because the choice between Data Lake Storage Gen1 and Gen2 is a performance or feature decision, not a security concern.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The subscription ID and resource group are specified.
Why it's wrong here
These are required for Data Lake Storage Gen1 linked service.
- ✗
The linked service uses a service principal instead of a managed identity.
Why it's wrong here
Service principal is a valid authentication method.
- ✗
Using Azure Data Lake Storage Gen1 instead of Gen2.
Why it's wrong here
Gen1 is still supported, not a security issue.
- ✓
The service principal key is stored as a SecureString but is visible in the JSON definition.
Why this is correct
Storing secrets in linked service JSON is insecure; should use Azure Key Vault.
Go deeper
Related to this question
About these practice questions
Courseiva writes every DP-203 question from scratch — 760 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-203 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-203 exam.