Microsoft DP-700 Practice Test 36
Question 350
An external shortcut works for the author but not another user after a security change. Where should investigation focus?
- Correct the shortcut target key prefix and casing to match the actual S3 object path.
- Compare connection binding authorization and OneLake security grants for the other identity.
- Rename or recreate the shortcut with a Delta-compatible table name that contains no spaces.
- Grant the shortcut connection identity the needed source folder ACL traversal and read rights.
Explanation
Correct Answer
B:External shortcut reads depend on connection identity and the data permissions applicable to the user. Inspect effective roles and run a controlled read.
Incorrect Answers
A:S3 object keys and prefixes are case-sensitive; a path typo can make an authorized shortcut point to an absent source.
C:Delta table discovery in the lakehouse requires valid names; a shortcut with spaces may not be recognized as a table.
D:Valid storage-account credentials do not by themselves guarantee directory-level access under hierarchical namespace ACLs.
Question 351
A read-only analyst cannot edit a pipeline after receiving Viewer membership. What is the cause?
- Viewer lacks workspace item authoring rights; use an approved Contributor assignment if editing is required.
- Provision and verify destination-specific connections and secrets before executing the items.
- Report sharing does not automatically confer direct OneLake data access.
- Deploy the supported dependency item to the target stage before invoking the dependent pipeline.
Explanation
Correct Answer
A:Workspace roles determine content editing; a Viewer role is deliberately insufficient for modifications. Test editing only after an authorized role change.
Incorrect Answers
B:Definition promotion and environment credential configuration are separate obligations.
C:Artifact consumption and underlying data-plane permissions are separate; direct access needs its own appropriate grant.
D:A pipeline definition can deploy while its referenced target item is missing; dependency sequencing avoids a runtime missing-item failure.
Question 352
An externally shared report renders but direct underlying table queries are denied. What distinction explains the result?
- Viewer lacks workspace item authoring rights; use an approved Contributor assignment if editing is required.
- Review the Member role or UNMASK/CONTROL permissions that allow the privileged user to view original values.
- Deploy the supported dependency item to the target stage before invoking the dependent pipeline.
- Report sharing does not automatically confer direct OneLake data access.
Explanation
Correct Answer
D:Artifact consumption and underlying data-plane permissions are separate; direct access needs its own appropriate grant. Test the report and raw data paths independently.
Incorrect Answers
A:Workspace roles determine content editing; a Viewer role is deliberately insufficient for modifications.
B:Workspace Members and other elevated identities can hold permissions that bypass masking; the mask is evaluated against the querying principal.
C:A pipeline definition can deploy while its referenced target item is missing; dependency sequencing avoids a runtime missing-item failure.
Question 353
A promoted data pipeline calls a dependent notebook that is absent from the target workspace. What should be included in the deployment plan?
- Grant extra permissions to the source-stage pipeline without adding target dependencies.
- Increase the notebook activity retry count until the missing item is found.
- Deploy the supported dependency item to the target stage before invoking the dependent pipeline.
- Set the dependent notebook's reporting-date base parameter in the pipeline.
Explanation
Correct Answer
C:A pipeline definition can deploy while its referenced target item is missing; dependency sequencing avoids a runtime missing-item failure. Check that the notebook exists and the pipeline resolves its target item ID.
Incorrect Answers
A:Source-stage access does not supply the missing item in the production deployment target.
B:Retrying the same unresolved item reference cannot deploy the notebook that is absent from the target workspace. The scenario, however, is that a promoted data pipeline calls a dependent notebook that is absent from the target workspace.
D:Changing an input parameter cannot make an undeployed notebook item appear in the target workspace. Those effects are relevant to a different technical condition. In this case, a promoted data pipeline calls a dependent notebook that is absent from the target workspace.
Question 354
After deployment, a pipeline resolves a variable library value from the wrong value set. What should be configured?
- Rebuild the notebook's Spark environment package before resolving the variable.
- Restart the pipeline with the existing incorrect variable-library binding.
- Bind the destination stage to the appropriate variable library value set for that environment.
- Bind the Production stage to the Development value set of the variable library.
Explanation
Correct Answer
C:Variable libraries centralize environment values, but the deployed workspace must resolve the value set intended for its stage. Inspect the resolved parameter value in the promoted pipeline run.
Incorrect Answers
A:A Spark dependency package is a separate concern from the variable library's value-set binding in the promoted stage. The scenario, however, is that after deployment, a pipeline resolves a variable library value from the wrong value set.
B:A rerun keeps the same stage-to-value-set mapping, so the wrong resolved value persists. In the current incident, after deployment, a pipeline resolves a variable library value from the wrong value set.
D:A development value set repeats the wrong-stage values rather than selecting the environment-appropriate configuration. That is a separate improvement from solving a case in which after deployment, a pipeline resolves a variable library value from the wrong value set.
Question 355
A service principal runs a notebook but is denied direct OneLake table reads despite the job having a workspace connection. What grant should be verified?
- Recreate the workspace connection with the same identity and unchanged data roles.
- Assign the service principal an appropriate effective OneLake security data-read role for the required table.
- Grant only Execute permission on the notebook to the service principal.
- Allow the service principal to read the variable library used by the pipeline.
Explanation
Correct Answer
B:A service principal identity needs the same applicable data-plane authorization as other callers; orchestration visibility is not a blanket table grant. Run the restricted table read with the service principal identity.
Incorrect Answers
A:Recreating connection metadata does not correct the effective role that denies the principal's table read. In the current incident, a service principal runs a notebook but is denied direct OneLake table reads despite the job having a workspace connection.
C:The service principal is already able to run the notebook; Execute permission alone does not grant OneLake table data access. That is a separate improvement from solving a case in which a service principal runs a notebook but is denied direct OneLake table reads despite the job having a workspace connection.
D:A variable library permission permits configuration lookup, not reads of a protected Delta table through OneLake security. Such a change is legitimate for its own purpose, but a service principal runs a notebook but is denied direct OneLake table reads despite the job having a workspace connection.
Question 356
A Fabric warehouse email column has dynamic data masking, but a workspace Member still sees unmasked values. What should the security owner explain?
- Change the column's masking function to show fewer unmasked characters.
- Promote the Member user to workspace Admin to enforce the masking policy.
- Review the Member role or UNMASK/CONTROL permissions that allow the privileged user to view original values.
- Apply a confidential sensitivity label to the warehouse item.
Explanation
Correct Answer
C:Workspace Members and other elevated identities can hold permissions that bypass masking; the mask is evaluated against the querying principal. Test the same column as a nonprivileged SELECT-only user.
Incorrect Answers
A:Users with UNMASK or database CONTROL permission can still see the original value regardless of a stricter mask function. Those effects are relevant to a different technical condition. In this case, a Fabric warehouse email column has dynamic data masking, but a workspace Member still sees unmasked values.
B:Admin has even more administrative privileges and also obtains CONTROL, not fewer unmasking rights. That is a separate improvement from solving a case in which a Fabric warehouse email column has dynamic data masking, but a workspace Member still sees unmasked values.
D:A label describes data classification; it cannot remove the Member's inherited privilege to bypass dynamic data masking. The target requirement is different: a Fabric warehouse email column has dynamic data masking, but a workspace Member still sees unmasked values.
Question 357
A production deployment copies item definitions but required target connections remain absent. What should release validation include?
- Delay the production trigger by one hour after the deployment.
- Provision and verify destination-specific connections and secrets before executing the items.
- Add an activity retry policy for authentication failures in the promoted pipeline.
- Redeploy the same pipeline definition without creating target-stage connections.
Explanation
Correct Answer
B:Definition promotion and environment credential configuration are separate obligations. Run a targeted connection health check in Production.
Incorrect Answers
A:Waiting for a schedule does not supply the connections or secrets missing from the destination stage. That is a separate improvement from solving a case in which a production deployment copies item definitions but required target connections remain absent.
C:Retries cannot repair consistently absent or invalid connection configuration at the target stage. The target requirement is different: a production deployment copies item definitions but required target connections remain absent.
D:Definition deployment does not necessarily provision the destination's required connection objects and credentials.
Question 358
A pipeline shows all activities succeeded but the next morning's report has wrong totals. What should operations add?
- Restore the referenced storage target or repair the shortcut mapping before changing notebook transforms.
- Identify partial writes and replay with idempotent overwrite or merge semantics.
- Compare model table and column dependencies with the current warehouse schema.
- Check data-quality and reconciliation results in addition to technical run status.
Explanation
Correct Answer
D:A green orchestration status cannot prove business correctness when joins, late data, or missing sources alter totals. Compare business control totals to authoritative source counts.
Incorrect Answers
A:A path-resolution failure happens below the transformation; notebook logic cannot read data that the shortcut no longer resolves.
B:Partial destination state can persist after canceled runs; unqualified append would duplicate records.
C:The model can fail processing when its query references changed objects even if the warehouse is otherwise healthy.
Question 359
A Dataflow Gen2 destination was partially loaded before a cancellation. How should recovery avoid double-counting?
- Identify partial writes and replay with idempotent overwrite or merge semantics.
- Compare model table and column dependencies with the current warehouse schema.
- Use the source event's effective business date for attribution and controlled prior-period restatement.
- Check data-quality and reconciliation results in addition to technical run status.
Explanation
Correct Answer
A:Partial destination state can persist after canceled runs; unqualified append would duplicate records. Compare target keys before and after replay.
Incorrect Answers
B:The model can fail processing when its query references changed objects even if the warehouse is otherwise healthy.
C:Arrival date and business effective date differ; conflating them misstates historical periods.
D:A green orchestration status cannot prove business correctness when joins, late data, or missing sources alter totals.
Question 360
A semantic model refresh failed after an upstream warehouse schema change. What should be investigated first?
- Identify partial writes and replay with idempotent overwrite or merge semantics.
- Restore the referenced storage target or repair the shortcut mapping before changing notebook transforms.
- Compare model table and column dependencies with the current warehouse schema.
- Use the source event's effective business date for attribution and controlled prior-period restatement.
Explanation
Correct Answer
C:The model can fail processing when its query references changed objects even if the warehouse is otherwise healthy. Run the model's source query against the new schema.
Incorrect Answers
A:Partial destination state can persist after canceled runs; unqualified append would duplicate records.
B:A path-resolution failure happens below the transformation; notebook logic cannot read data that the shortcut no longer resolves.
D:Arrival date and business effective date differ; conflating them misstates historical periods.