Microsoft DP-700 Practice Test 10
Question 90
An external shortcut is readable only with valid storage credentials. What does OneLake role membership add?
- Replace All data with an explicit Selected data scope where future access is not intended.
- Apply OneLake authorization to the shortcut path in addition to validating its connection.
- Grant ReadWrite on that selected folder, with prerequisites satisfied.
- Review virtual members assigned through the role's permission groups.
Explanation
Correct Answer
B:The external credential grants source connectivity, while Fabric roles decide which identities can reach the shortcut data. Test an unauthorized identity against a working shortcut connection.
Incorrect Answers
A:An All data role covers new objects as they appear; selected scope limits the grant to approved tables and folders.
C:A scoped ReadWrite grant can authorize operations on the selected path for a read-only workspace user.
D:Permission-group membership can add identities without manual entry, so removing a displayed member directly may not revoke the underlying grant.
Question 91
A finance lakehouse contains regulated customer information and should carry its classification across supported downstream experiences. Which governance feature fits?
- Endorse the validated model using its supported certified endorsement process.
- Apply an appropriate sensitivity label to the supported Fabric item.
- Use promoted endorsement if allowed by the organization's endorsement policy.
- Review its associated domain and governance metadata in the OneLake catalog.
Explanation
Correct Answer
B:Sensitivity labeling communicates data classification and can trigger governance behavior where supported; it is not a substitute for data-plane access permissions. Inspect label display and downstream supported propagation.
Incorrect Answers
A:Certification signals trusted organizational content in discovery; adding an attractive title does not give the same governance indication.
C:Promotion identifies valuable content without asserting the stricter certification governance process.
D:Organizational ownership and catalog grouping can drift when workspaces are reorganized; permissions alone do not restore stewardship metadata.
Question 92
Business users cannot tell which of several sales models is officially trusted. What should the authorized steward apply?
- Endorse the validated model using its supported certified endorsement process.
- Enforce explicit data access controls in addition to applying the sensitivity label.
- Review its associated domain and governance metadata in the OneLake catalog.
- Verify its sensitivity classification and effective item/data permissions on the destination.
Explanation
Correct Answer
A:Certification signals trusted organizational content in discovery; adding an attractive title does not give the same governance indication. Confirm catalog endorsement under a nonadmin user.
Incorrect Answers
B:A label is classification metadata and policy context, not a universal replacement for SQL, workspace, or OneLake authorization.
C:Organizational ownership and catalog grouping can drift when workspaces are reorganized; permissions alone do not restore stewardship metadata.
D:Moving or recreating an item can change how labels and access apply; both classification and actual grants need review.
Question 93
An analyst's useful dataset is not yet formally certified but should be easier to find as a recommended asset. Which endorsement level might fit?
- Apply an appropriate sensitivity label to the supported Fabric item.
- Use promoted endorsement if allowed by the organization's endorsement policy.
- Verify its sensitivity classification and effective item/data permissions on the destination.
- Enforce explicit data access controls in addition to applying the sensitivity label.
Explanation
Correct Answer
B:Promotion identifies valuable content without asserting the stricter certification governance process. Verify its promoted indicator in the catalog.
Incorrect Answers
A:Sensitivity labeling communicates data classification and can trigger governance behavior where supported; it is not a substitute for data-plane access permissions.
C:Moving or recreating an item can change how labels and access apply; both classification and actual grants need review.
D:A label is classification metadata and policy context, not a universal replacement for SQL, workspace, or OneLake authorization.
Question 94
A team assumes labeling a lakehouse automatically prevents every unauthorized query. What should the security lead require?
- Enforce explicit data access controls in addition to applying the sensitivity label.
- Use promoted endorsement if allowed by the organization's endorsement policy.
- Review its associated domain and governance metadata in the OneLake catalog.
- Endorse the validated model using its supported certified endorsement process.
Explanation
Correct Answer
A:A label is classification metadata and policy context, not a universal replacement for SQL, workspace, or OneLake authorization. Query sensitive records under a denied identity.
Incorrect Answers
B:Promotion identifies valuable content without asserting the stricter certification governance process.
C:Organizational ownership and catalog grouping can drift when workspaces are reorganized; permissions alone do not restore stewardship metadata.
D:Certification signals trusted organizational content in discovery; adding an attractive title does not give the same governance indication.
Question 95
A report has lost its business-owner classification after a workspace reorganization. What should the steward inspect?
- Review its associated domain and governance metadata in the OneLake catalog.
- Use promoted endorsement if allowed by the organization's endorsement policy.
- Enforce explicit data access controls in addition to applying the sensitivity label.
- Verify its sensitivity classification and effective item/data permissions on the destination.
Explanation
Correct Answer
A:Organizational ownership and catalog grouping can drift when workspaces are reorganized; permissions alone do not restore stewardship metadata. Confirm the report appears with the intended business owner.
Incorrect Answers
B:Promotion identifies valuable content without asserting the stricter certification governance process.
C:A label is classification metadata and policy context, not a universal replacement for SQL, workspace, or OneLake authorization.
D:Moving or recreating an item can change how labels and access apply; both classification and actual grants need review.
Question 96
A repository automation wants to promote every dataset to certified without human evaluation. What governance safeguard is needed?
- Verify its sensitivity classification and effective item/data permissions on the destination.
- Enforce explicit data access controls in addition to applying the sensitivity label.
- Use promoted endorsement if allowed by the organization's endorsement policy.
- Reserve certification for approved stewards and an explicit evidence-based review process.
Explanation
Correct Answer
D:Certification communicates an organizational trust assertion and should not be applied indiscriminately to unreviewed artifacts. Audit who can certify and the content qualification steps.
Incorrect Answers
A:Moving or recreating an item can change how labels and access apply; both classification and actual grants need review.
B:A label is classification metadata and policy context, not a universal replacement for SQL, workspace, or OneLake authorization.
C:Promotion identifies valuable content without asserting the stricter certification governance process.
Question 97
A confidential customer dataset is moved to a new Fabric item. What should be checked before sharing?
- Verify its sensitivity classification and effective item/data permissions on the destination.
- Review its associated domain and governance metadata in the OneLake catalog.
- Use promoted endorsement if allowed by the organization's endorsement policy.
- Endorse the validated model using its supported certified endorsement process.
Explanation
Correct Answer
A:Moving or recreating an item can change how labels and access apply; both classification and actual grants need review. Test the destination as an authorized and unauthorized user.
Incorrect Answers
B:Organizational ownership and catalog grouping can drift when workspaces are reorganized; permissions alone do not restore stewardship metadata.
C:Promotion identifies valuable content without asserting the stricter certification governance process.
D:Certification signals trusted organizational content in discovery; adding an attractive title does not give the same governance indication.
Question 98
Compliance needs a record of who changed access to analytics artifacts. Which evidence source should be enabled or reviewed?
- Search the supported activity audit trail for the specific deletion event and actor.
- Review workspace membership records together with the corresponding audit events.
- Confirm the audit source's actual retention and available time range before assuming six months are present.
- Use the supported Fabric/Microsoft Purview audit log records for relevant administrative and sharing events.
Explanation
Correct Answer
D:Audit logs provide attributable activity records; ordinary pipeline run metrics are not a substitute for governance event history. Find a test sharing or permission-change event with its actor and timestamp.
Incorrect Answers
A:An absent item might result from deletion, relocation, or permissions; the audit event can distinguish an attributable operation.
B:Current membership shows who has rights now; audit evidence supports who granted or removed them over time.
C:Retention depends on the configured auditing platform and licensing; a current log view does not prove complete historic coverage.
Question 99
A pipeline run failed and the incident team wants execution diagnostics, not an identity audit. Which telemetry should they open?
- Review workspace membership records together with the corresponding audit events.
- Inspect the pipeline run and activity details in the Fabric monitoring experience.
- Confirm the audit source's actual retention and available time range before assuming six months are present.
- Correlate audited item access and sharing events with the identity and event time.
Explanation
Correct Answer
B:Operational execution logs reveal failing activities; administrative audit logs focus on user and system actions rather than full run diagnostics. Correlate the failed activity ID with its error output.
Incorrect Answers
A:Current membership shows who has rights now; audit evidence supports who granted or removed them over time.
C:Retention depends on the configured auditing platform and licensing; a current log view does not prove complete historic coverage.
D:Access investigations require actor, target, and time; a data row count alone cannot establish who changed sharing.
Question 100
Investigators must attribute unexpected access to a shared item. Which linkage is essential?
- Confirm the audit source's actual retention and available time range before assuming six months are present.
- Summarize tenant-wide audit event counts without filtering for the shared item, actor identity or access timestamp.
- Correlate audited item access and sharing events with the identity and event time.
- Inspect the pipeline run and activity details in the Fabric monitoring experience.
Explanation
Correct Answer
C:Use the relevant Fabric or Microsoft Purview audit events and correlate their actor, action, target-item identifier and timestamp. If authorization changed, align sharing/permission history with the access event; disclose gaps if the audit store did not retain the period.
Incorrect Answers
A:Retention depends on the configured auditing platform and licensing; a current log view does not prove complete historic coverage. Access investigations require actor, target, and time; a data row count alone cannot establish who changed sharing. Match the event to the item and relevant principal.
B:Aggregate audit counts cannot prove who accessed a specific shared item. Filter supported audit events by the target item and event time, then correlate actor identity and action with sharing changes before attributing the incident.
D:Operational execution logs reveal failing activities; administrative audit logs focus on user and system actions rather than full run diagnostics. Access investigations require actor, target, and time; a data row count alone cannot establish who changed sharing. Match the event to the item and relevant principal.
