A security team needs to monitor all access to sensitive items in Fabric. They want to be alerted when a user accesses an item with a 'Confidential' sensitivity label. The team also needs to know who changed the label on an item. You need to design a monitoring solution. What should you configure?

Enable audit logging and use Microsoft Purview to create alerts for access to labeled items and label changes.

Use workspace roles to restrict access to sensitive items and rely on the workspace activity log.

Configure item-level permissions to deny access to sensitive items and use the Fabric portal's activity feed.

Apply sensitivity labels and use OneLake data access roles to log access.

A company stores data in OneLake and needs to ensure that users from the HR department can access only the HR folders, while users from the IT department can access only the IT folders. The company also needs to ensure that no user can access both sets of folders. You need to configure OneLake security. What should you configure?

Create two OneLake data access roles: one for HR with read access to HR folders, and one for IT with read access to IT folders; assign the respective Entra ID groups to each role.

Use workspace roles to grant HR and IT groups access to the entire workspace.

Apply sensitivity labels to the folders and configure them to block access for the other group.

Create a single OneLake data access role that grants access to both HR and IT folders, and assign both groups to it.

A sales team uses a Fabric semantic model that contains a 'SalesAmount' column and a 'Region' column. The sales managers should see only the data for their own region, while the executive team should see all regions. You need to implement security so that each manager sees only their region's data, and executives see all data. What should you configure?

Create a row-level security role that filters by the user's region and assign managers to that role; leave executives with no role.

Create a separate semantic model for each region and give managers access to their region's model.

Apply a sensitivity label to the 'Region' column to restrict access.

Create a column-level security rule to hide the 'Region' column from managers.

An organization needs to prove to an auditor which users accessed a specific Fabric report and whether any of them exported the data. What should you use?

The report's version history in the workspace.

Microsoft Fabric audit logs from Microsoft Purview, filtering for report access and export events.

Microsoft Certified:Fabric Data Engineer Associate

Domain 1Objective 3

Configure Security and Governance DP-700 Practice Questions (Page 5)

Part of the Implement and manage an analytics solution domain, which accounts for 30–35% of the DP-700 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

11concepts

30–35%of the exam

Questions 21–25

21expert · hard
A security team needs to monitor all access to sensitive items in Fabric. They want to be alerted when a user accesses an item with a 'Confidential' sensitivity label. The team also needs to know who changed the label on an item. You need to design a monitoring solution. What should you configure?
Select an answer first
22expert · hard
A company stores data in OneLake and needs to ensure that users from the HR department can access only the HR folders, while users from the IT department can access only the IT folders. The company also needs to ensure that no user can access both sets of folders. You need to configure OneLake security. What should you configure?
Select an answer first
23application · medium
A sales team uses a Fabric semantic model that contains a 'SalesAmount' column and a 'Region' column. The sales managers should see only the data for their own region, while the executive team should see all regions. You need to implement security so that each manager sees only their region's data, and executives see all data. What should you configure?
Select an answer first
24foundation · easy
Which Microsoft Fabric workspace role is designed for users who need to view and interact with content but cannot modify or create items?
Select an answer first
25application · medium
An organization needs to prove to an auditor which users accessed a specific Fabric report and whether any of them exported the data. What should you use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DP-700

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “DP-700” is a trademark of its owner, used for identification only.

Configure Security and Governance DP-700 Practice Questions (Page 5)

Questions 21–25

A security team needs to monitor all access to sensitive items in Fabric. They want to be alerted when a user accesses an item with a 'Confidential' sensitivity label. The team also needs to know who changed the label on an item. You need to design a monitoring solution. What should you configure?

Which Microsoft Fabric workspace role is designed for users who need to view and interact with content but cannot modify or create items?

An organization needs to prove to an auditor which users accessed a specific Fabric report and whether any of them exported the data. What should you use?

Keep studying — Implement and manage an analytics solution