Configure Security and Governance DP-700 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary security configuration for OneLake in Microsoft Fabric?

   • AWorkspace-level permissions
   • BRow-level security
   • CColumn-level security
   • DDynamic data masking
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A healthcare organization has a Fabric semantic model that includes patient names, diagnoses, and treatment costs. Nurses should see patient names and diagnoses but not treatment costs. Billing staff should see treatment costs but not patient names. You need to configure security to meet these requirements. What should you do?

   • ACreate two column-level security roles: one that denies access to 'TreatmentCost' for nurses, and one that denies access to 'PatientName' for billing staff.
   • BCreate two row-level security roles that filter out rows containing sensitive data.
   • CCreate two separate semantic models, one for nurses and one for billing staff.
   • DApply a sensitivity label to the 'TreatmentCost' column and a different label to 'PatientName'.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A team stores raw data files in a OneLake folder within a Fabric workspace. The data governance policy requires that only the data engineering team can write to the folder, but analysts in the workspace need to read the files. You need to configure access. What should you do?

   • AApply a sensitivity label to the folder and set the label to 'read-only'.
   • BSet folder-level permissions in OneLake: grant 'Read' to analysts and 'Read/Write' to the data engineering team.
   • CUse dynamic data masking on the folder to prevent writes.
   • DSet the workspace role of analysts to 'Viewer' and data engineers to 'Contributor'.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which of the following is a benefit of using sensitivity labels in Microsoft Fabric?

   • AThey provide a way to permanently delete sensitive data
   • BThey replace the need for row-level security
   • CThey allow users to bypass access controls
   • DThey enable automatic enforcement of data protection policies
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company is subject to data protection regulations that require them to know which data items contain personal data and to control who can access them. The compliance officer needs to generate a report of all items with the 'Personal' sensitivity label. You need to provide this information. What should you use?

   • AQuery the Fabric audit logs for label application events.
   • BUse the workspace settings to export a list of items and their labels.
   • CCreate a OneLake data access role that includes only labeled items.
   • DUse the Microsoft Purview compliance portal to search for items with the 'Personal' sensitivity label.
   Reveal Solution Discussion Select an answer first