Implement Security and Governance DP-600 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A human resources dataset includes employee names, salaries, and departments. HR generalists need to see employee names and departments but not salaries. HR managers need to see all columns. What should you implement?

   • AColumn-level security (CLS) that denies the Salary column to HR generalists.
   • BRow-level security (RLS) that filters out salary rows for HR generalists.
   • CObject-level security (OLS) that hides the entire table from HR generalists.
   • DWorkspace-level permissions that deny access to the dataset for HR generalists.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A data governance team wants to ensure that a dataset containing customer personal data is easily identifiable as sensitive and that it is marked as trusted for reporting. What should they do?

   • AApply column-level security (CLS) to hide all columns.
   • BApply a 'Confidential' sensitivity label and endorse the dataset as promoted.
   • CChange the workspace role to Admin for all users.
   • DApply row-level security (RLS) to the dataset.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A dataset contains 'CustomerID', 'CreditScore', and 'Region' columns. Customer service managers need to see customers in their region but must not see CreditScore. Regional executives need to see all data for their region. What is the most efficient security configuration?

   • AApply only RLS to filter by Region.
   • BApply only CLS to hide CreditScore from customer service managers.
   • CApply RLS to filter by Region, and CLS to hide CreditScore from customer service managers.
   • DApply OLS to hide the entire table from customer service managers.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A lakehouse contains files with financial data. A security policy requires that these files be marked as 'Confidential' and that only the finance team can access them. What should you implement?

   • AApply a 'Confidential' sensitivity label and configure file-level permissions to restrict access to the finance team.
   • BUse object-level security (OLS) on the lakehouse.
   • CApply row-level security (RLS) to the files.
   • DEndorse the files as certified.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A Fabric workspace contains a highly sensitive report. The workspace has several Members who need access to other items but should not see this report. You need to block access to the report for these Members while preserving their workspace access. What is the most efficient way to achieve this?

   • AApply a sensitivity label to the report that blocks the Members' access.
   • BMove the report to a separate workspace and give the Members access to the original workspace.
   • CRemove the Members from the workspace and add them as Viewers to the other items.
   • DUse item-level permissions to deny access to the report for the specific Members.
   Reveal Solution Discussion Select an answer first