Describe considerations for working with non-relational data on Azure →hardMultiple ChoiceObjective-mapped
DP-900 Practice Question: Describe considerations for working with non-relational data on Azure
Exhibit
{
"kind": "StorageV2",
"properties": {
"isHnsEnabled": true,
"encryption": {
"keySource": "Microsoft.Storage"
},
"networkAcls": {
"defaultAction": "Deny",
"virtualNetworkRules": [],
"ipRules": []
},
"supportsHttpsTrafficOnly": true
}
}Refer to the exhibit. You are analyzing the configuration of an Azure Storage account. Which of the following is true about this account?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
It supports Azure Data Lake Storage Gen2.
The property 'isHnsEnabled' is set to true, which enables the hierarchical namespace for Azure Data Lake Storage Gen2. Option A is correct because this configuration supports Azure Data Lake Storage Gen2. Option B is wrong because the network ACLs have default action 'Deny' and no rules, so access is denied by default. Option C is wrong because the encryption key source is Microsoft.Storage, not Azure Key Vault. Option D is wrong because the account kind is StorageV2, not general-purpose v1.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
It supports Azure Data Lake Storage Gen2.
Why this is correct
The hierarchical namespace enabled property (isHnsEnabled) is set to true, which is the defining feature of Azure Data Lake Storage Gen2. This couples Blob Storage scalability with a real directory hierarchy and POSIX-style access control lists, enabling file-level and directory-level permissions. Therefore this account is confirmed to support Azure Data Lake Storage Gen2 workloads.
- ✗
It allows all network traffic by default.
Why it's wrong here
The exhibit shows the storage account firewall's default action is Deny, not Allow. Network access is restricted to explicitly permitted virtual networks, IP ranges, or private endpoints, and any traffic that does not match those allow rules is blocked. Thus the account does not allow all network traffic by default.
- ✗
Encryption uses Azure Key Vault.
Why it's wrong here
The storage account's encryption key source is displayed as Microsoft.Storage, which indicates Microsoft-managed keys, not customer-managed keys from Azure Key Vault. Customer-managed keys require the key source to be Microsoft.KeyVault and enable you to independently rotate or revoke encryption keys. Because Key Vault is not the key source shown, this option is incorrect.
- ✗
It is a general-purpose v1 storage account.
Why it's wrong here
The exhibit specifies the account kind as StorageV2, meaning it is a general-purpose v2 storage account rather than a general-purpose v1 account. General-purpose v2 accounts support the latest features such as cool and archive access tiers, Azure Data Lake Storage Gen2, and improved throughput; general-purpose v1 is a legacy account type with limited functionality. Therefore calling it a general-purpose v1 account is false.
Go deeper
Related to this question
Learn chapter
Data Roles and Core Concepts
Key term
Data lake
A data lake is a centralized storage repository that holds vast amounts of raw data in its native format until it is needed for analysis.
Key term
Azure Storage
Azure Storage is Microsoft's cloud-based service for storing data like files, messages, and backups with high durability and scalability.
About these practice questions
One of 820 original DP-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-900 exam.