You need to grant a data engineer permission to read and write data in an Azure Storage account, but only for a specific container. Which Azure feature should you use?

Azure role-based access control (RBAC)

Azure Active Directory (Azure AD) groups

Which practice helps protect sensitive information when using Azure Databricks?

Writing credentials directly in the notebook

Sharing notebooks with all team members

Using secret scopes to store credentials

A data engineering team stores parquet files in an Azure Data Lake Storage Gen2 account. The storage account has a private endpoint enabled. A group of data scientists needs read access to a specific folder, but they must not be able to list or read files outside that folder. The team wants to grant access using Azure AD identities. What should you configure?

Assign the Storage Blob Data Reader role at the specific folder scope and add POSIX ACL entries on the folder for the data scientists group.

Assign the Storage Blob Data Reader role at the storage account scope and rely on the private endpoint to restrict network access.

Assign the Storage Blob Data Reader role at the container scope and then add POSIX ACL entries on the specific folder for the data scientists group.

Add POSIX ACL entries on the specific folder granting read and execute permissions to the data scientists group, and ensure the parent folders have execute permissions for traversal.

Which Azure feature provides transparent encryption of data at rest for Azure Blob Storage and Azure Data Lake Storage Gen2?

Azure Storage Service Encryption

You need to allow a virtual machine in a virtual network to access an Azure Storage account without exposing it to the public internet. Which Azure feature should you use?

Virtual network (VNet) service endpoint

Microsoft Certified:Azure Data Engineer Associate

Domain 3Objective 1

Implement Data Security DP-203 Practice Questions (Page 4)

Part of the Secure, monitor, and optimize data storage and data processing domain, which accounts for 30–35% of the DP-203 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 4–8 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

13concepts

30–35%of the exam

Questions 16–20

16foundation · easy
You need to grant a data engineer permission to read and write data in an Azure Storage account, but only for a specific container. Which Azure feature should you use?
Select an answer first
17foundation · easy
Which practice helps protect sensitive information when using Azure Databricks?
Select an answer first
18application · medium
A data engineering team stores parquet files in an Azure Data Lake Storage Gen2 account. The storage account has a private endpoint enabled. A group of data scientists needs read access to a specific folder, but they must not be able to list or read files outside that folder. The team wants to grant access using Azure AD identities. What should you configure?
Select an answer first
19foundation · easy
Which Azure feature provides transparent encryption of data at rest for Azure Blob Storage and Azure Data Lake Storage Gen2?
Select an answer first
20foundation · easy
You need to allow a virtual machine in a virtual network to access an Azure Storage account without exposing it to the public internet. Which Azure feature should you use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DP-203

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “DP-203” is a trademark of its owner, used for identification only.