What is the primary purpose of a column mask in Unity Catalog?

To protect sensitive data by transforming the value returned to a user

To improve query performance on the column

To physically delete sensitive data from the table

To enforce a foreign key constraint

A data governance team needs to understand how a specific column in a Unity Catalog table is derived and which upstream tables contribute to it. They also need to see who last modified the table definition and when. What should they use?

Query the audit logs to find the column derivation logic.

Use the table's column comments to understand the derivation.

Use Catalog Explorer to view the table's lineage graph and the table's history details.

Run a `DESCRIBE TABLE` command to see the lineage.

A healthcare analytics company uses Unity Catalog to manage patient data. The data engineering team needs to ensure that when analysts query the `patients` table, they only see rows for their own department and the `ssn` column is displayed as `XXX-XX-XXXX` unless the user is a member of the `privacy_officers` group. The company wants to enforce this centrally without modifying the underlying table or creating multiple views. What should the data engineer configure?

Create a dynamic view that filters rows by department and masks the SSN column using a CASE expression.

Create separate schemas for each department and grant SELECT only on the relevant schema to each group.

Apply a row filter on the `patients` table for department and a column mask on the `ssn` column for non-privacy officers.

Use a materialized view that pre-filters rows and masks SSN, then grant access to the view.

A data provider wants to share a table with an external partner using Delta Sharing. The table contains a `customer_email` column that must not be shared. The provider also wants to ensure that only the partner's organization can access the shared data. What should they do?

Create a new table without the `customer_email` column and share that table.

Share the table as-is and rely on the partner's security policies to protect the email column.

Create a share that includes the table but apply a column mask on `customer_email` before adding it to the share.

Use a row filter to hide the email column from the partner.

A security team wants to detect when a user attempts to query a Unity Catalog table but receives zero rows because of a row filter. They also want to know which user attempted the query and when. The team wants to avoid storing sensitive data in the audit logs. What should they do?

Enable audit logging and configure alerts on the audit logs for table access events, filtering for queries that return zero rows.

Grant SELECT only to authorized users and use table history to see who accessed the table.

Create a row filter that logs the user and timestamp to a separate table.

Use column masks to hide sensitive columns and rely on the mask to log access.

Microsoft Certified:Azure Databricks Data Engineer Associate

Domain 2Objective 2

Govern Unity Catalog Objects DP-750 Practice Questions (Page 7)

Part of the Secure and govern Unity Catalog objects domain, which accounts for 15–20% of the DP-750 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–16 in this domain), expect 4–8 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

9concepts

15–20%of the exam

Questions 31–35

31foundation · easy
What is the primary purpose of a column mask in Unity Catalog?
Select an answer first
32application · medium
A data governance team needs to understand how a specific column in a Unity Catalog table is derived and which upstream tables contribute to it. They also need to see who last modified the table definition and when. What should they use?
Select an answer first
33application · medium
A healthcare analytics company uses Unity Catalog to manage patient data. The data engineering team needs to ensure that when analysts query the `patients` table, they only see rows for their own department and the `ssn` column is displayed as `XXX-XX-XXXX` unless the user is a member of the `privacy_officers` group. The company wants to enforce this centrally without modifying the underlying table or creating multiple views. What should the data engineer configure?
Select an answer first
34application · medium
A data provider wants to share a table with an external partner using Delta Sharing. The table contains a `customer_email` column that must not be shared. The provider also wants to ensure that only the partner's organization can access the shared data. What should they do?
Select an answer first
35expert · hard
A security team wants to detect when a user attempts to query a Unity Catalog table but receives zero rows because of a row filter. They also want to know which user attempted the query and when. The team wants to avoid storing sensitive data in the audit logs. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to DP-750

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “DP-750” is a trademark of its owner, used for identification only.