DP-203 Azure Data Engineer Associate Data Security and Compliance 4

Question 1

A company must comply with GDPR and needs to identify all columns containing personal data across Azure Synapse and ADLS Gen2 assets. Which Azure service automates this discovery?

Accepted Answer

Microsoft Purview with automated scanning and classification

Answer

Microsoft Purview scans registered data sources and automatically classifies data using built-in and custom classifiers, including GDPR-relevant personal data patterns.

Question 2

An Azure Databricks cluster is configured with credential passthrough. What does this mean for data access?

Accepted Answer

The cluster passes the end user's Azure AD credentials to ADLS Gen2, enforcing per-user access control

Answer

Azure AD credential passthrough forwards each user's own Azure AD token to ADLS Gen2, so RBAC and ACL rules are enforced per user rather than per cluster.

Question 3

Which Azure Key Vault object type should a data engineer use to store an Azure Storage account access key?

Accepted Answer

Secret

Answer

Storage account access keys are password-like string values, which should be stored as Key Vault Secrets rather than cryptographic Keys or Certificates.

Question 4

A data pipeline writes raw data to an ADLS Gen2 container and then processes it into a curated zone. The processed data must not be deletable by anyone except a designated compliance officer for 7 years. Which feature enforces this?

Accepted Answer

Azure Blob Storage immutability policy (WORM) with a time-based retention policy

Answer

WORM (Write Once, Read Many) immutability policies with time-based retention lock blobs against deletion or modification for the specified period, even by admins.

Question 5

A Synapse Analytics pipeline uses a linked service to connect to Azure SQL Database. The pipeline fails with an error that the Managed Identity does not have permission. What is the correct fix?

Accepted Answer

Grant the Synapse workspace Managed Identity the appropriate database role in Azure SQL Database

Answer

When using Managed Identity authentication, you must explicitly grant the Synapse workspace's identity database permissions (e.g., db_datareader) in the target SQL Database.

DP-203 Azure Data Engineer Associate Practice Test

DP-203 Azure Data Engineer Associate Practice Test

DP-203 Azure Data Engineer Associate Data Security and Compliance 4