Microsoft Azure Security Engineer Certification Data Engineering on Microsoft Azure: Design & Implement Data Storage 4 — Questions and Answers
Question 1: You need to implement masking on the email column in Azure SQL Database so developers can see only the first character and domain format. Which Dynamic Data Masking function should you use?
- Default masking function
- Email masking function (Correct answer)
- Random masking function
- Custom String masking function
Correct answer: Email masking function
The Email masking function exposes the first letter of the email address and replaces the rest with a fixed format (e.g., aXXX@XXXX.com).
Question 2: When designing a star schema in Azure Synapse Analytics, which table type should dimension tables typically use to optimize query performance for small lookup tables?
- Hash-distributed
- Round-robin
- Replicated (Correct answer)
- Partitioned
Correct answer: Replicated
Replicated tables are copied to each compute node, eliminating data movement when joining small dimension tables to large fact tables.
Question 3: Which Azure service provides a fully managed, serverless Apache Spark environment for running big data analytics without managing infrastructure?
- Azure HDInsight
- Azure Databricks
- Azure Synapse Spark pools (Correct answer)
- Azure Machine Learning Compute
Correct answer: Azure Synapse Spark pools
Azure Synapse Analytics Spark pools provide serverless, fully managed Apache Spark without requiring infrastructure management.
Question 4: You are using Azure Data Factory to copy data from Azure Blob Storage to Azure Synapse Analytics. Which sink option provides the fastest load performance?
- BCP utility
- BULK INSERT
- PolyBase or COPY INTO statement (Correct answer)
- Row-by-row INSERT statements
Correct answer: PolyBase or COPY INTO statement
PolyBase and the COPY INTO statement are designed for high-throughput parallel data loading into Azure Synapse Analytics.
Question 5: Which Azure Cosmos DB consistency level provides the strongest consistency guarantees, ensuring reads always return the most recent committed write?
- Eventual
- Consistent Prefix
- Session
- Strong (Correct answer)
Correct answer: Strong
Strong consistency guarantees linearizability, meaning reads always reflect the latest committed write regardless of the region.
Question 6: You need to implement row-level security in Azure Synapse Analytics so sales representatives can only query their own customers' data. Which approach should you use?
- Implement column-level security with DENY statements
- Create separate views per user and grant access to views
- Use CREATE SECURITY POLICY with a predicate function (Correct answer)
- Implement Dynamic Data Masking on the sales_rep_id column
Correct answer: Use CREATE SECURITY POLICY with a predicate function
Row-level security in Synapse uses a security policy with an inline table-valued predicate function to filter rows based on user identity.
Question 7: An Azure Data Factory pipeline fails intermittently due to transient network errors when connecting to an external REST API. Which activity property should you configure to handle this?
- Set the timeout to a higher value
- Enable the retry policy with retry count and interval (Correct answer)
- Add a Wait activity before the Web activity
- Use a Foreach activity to retry manually
Correct answer: Enable the retry policy with retry count and interval
ADF activities support a built-in retry policy where you configure the retry count and interval to automatically handle transient failures.
Microsoft Azure Security Engineer Certification Data Engineering on Microsoft Azure: Design & Implement Data Storage 4
You need to implement masking on the email column in Azure SQL Database so developers can see only the first character and domain format.
Which Dynamic Data Masking function should you use?