Microsoft DP-700 Practice Test 13

Question 120

During offboarding, an analyst’s account is still enabled for a controlled revocation test before deactivation. Their group-derived lakehouse permissions have just been removed. Which evidence establishes that effective data access was revoked?

Enumerate the identity’s remaining effective grants and re-test the formerly accessible table and file paths using the removed account after propagation.
Check only the first group from which the employee was removed.
Query the lakehouse with the security administrator’s account rather than the removed employee.
Observe that a scheduled refresh ran after the offboarding date, without testing data reads.

Explanation

Correct Answer

Review the user’s remaining direct and group-derived grants, allow documented propagation, then test denied reads with the still-active account in the controlled offboarding window. Deactivate the account after completing the required access checks.

Incorrect Answers

The identity could remain authorized through a different Entra group or an explicit OneLake role assignment; all effective grants must be inspected.

The security administrator’s privileges do not demonstrate effective revocation of the departed user.

Pipeline success is not evidence that the former employee’s identity lost table and file access after permission propagation.

Question 121

A sensitivity label is attached to a Fabric source item but a downstream export does not show that label. Which action should the owner take?

Assume that the Confidential source item label always propagates to every export file format.
Check the support and conditions for label propagation along that export path, then apply a permitted label or protection to the downstream artifact where required.
Rename the unlabeled export file to start with Confidential.
Grant more users permission to export the lakehouse and expect that to copy the label.

Explanation

Correct Answer

Sensitivity label inheritance is workload- and destination-dependent; the source label alone is not evidence every downstream copy is labeled.

Incorrect Answers

Automatic label propagation is not universal; it depends on the supported source, destination and operation. The export must be checked and classified if necessary.

A filename prefix is not the standardized Purview label metadata expected by consumers and cannot substitute for a supported downstream classification.

Permission to export does not determine whether an export operation carries sensitivity-label metadata or requires an explicit destination label.

Question 122

An analyst sees a Confidential label on a lakehouse, but an exported artifact has none. Select THREE checks that can explain or correct the mismatch.

A source label always travels to every export format regardless of the connector.
Check whether the specific source-to-target operation supports automatic label propagation.
Inspect the label assigned to the exact source item and the downstream item, not just the workspace title.
The unlabelled file proves the source lakehouse lost its sensitivity label.
Setting a workspace description to Confidential automatically tags exports.
Review required permissions or tenant labeling policy and apply an approved classification to the destination if propagation is unsupported.

Explanation

Correct Answers

Label inheritance does not universally apply to every Fabric destination and export workflow.

Classification metadata is associated with supported artifacts, so both ends must be examined rather than inferred from a workspace name.

A missing destination label can require a deliberate authorized labeling action under the organization’s information-protection rules.

Incorrect Answers

Sensitivity-label propagation is operation- and destination-dependent; an unsupported export path may not carry the label without explicit downstream classification.

An unsupported propagation operation can produce an unlabelled output while the original item remains Confidential. Both endpoints must be checked.

A workspace description is not a Microsoft Purview sensitivity label and does not assign classification metadata to exported artifacts.

Question 123

After changing labeling policy for a Fabric export, how should an auditor verify the expected classification?

Inspect only the source lakehouse label without generating the downstream artifact.
Check whether every user is allowed to open the destination folder and infer its label.
Produce a controlled downstream item using the supported export path and inspect its actual sensitivity label and source lineage under an authorized reader.
Assume the export is classified because the workspace title contains Confidential.

Explanation

Correct Answer

A real target artifact with correct classification demonstrates policy effect; seeing only the source label cannot establish inheritance behavior.

Incorrect Answers

Source classification is necessary context but does not prove the selected export path propagates that label to a concrete output.

Access permissions and label metadata are different controls. An accessible file can still be missing the required classification.

Workspace naming does not guarantee sensitivity-label propagation. The actual generated item’s label must be inspected.

Question 124

A Fabric mirrored catalog exposes externally managed data. An analyst needs read access to selected mirrored content without obtaining edit rights to the original producer system. What should the admin assign?

Use supported read-scoped OneLake security roles on the mirrored catalog and preserve source-system authorization where required.
Grant Contributor in the mirrored catalog’s workspace so the analyst can write and read everything.
Grant a mirrored-catalog role with ReadWrite even though the item supports only Read.
Use a lakehouse ReadAll grant on an unrelated item to control the external mirrored catalog.

Explanation

Correct Answer

Mirrored catalog OneLake roles support Read; access to a mirrored data item does not make the consumer owner of the external data source.

Incorrect Answers

Contributor is broader than the required read-only mirror access and does not change the external producer’s authority or mirrored catalog role support.

The OneLake security model for mirrored catalogs does not offer general ReadWrite on mirrored source data; assigning an unsupported permission is not a viable approach.

Permissions must be scoped to the mirrored catalog and applicable source. An unrelated lakehouse data grant does not protect or authorize the mirror.

Question 125

A consumer expects to update mirrored catalog data merely by granting a OneLake role, but role configuration offers Read only. Why?

A mirrored catalog supports granting ReadWrite whenever the consumer has Contributor in another workspace.
The mirrored catalog supports Read, not arbitrary ReadWrite, in its OneLake security role model; source write authority remains distinct.
Renaming the mirrored catalog to Lakehouse enables unrestricted Delta writes.
An Eventstream destination must be configured to make OneLake mirrored catalog roles writable.

Explanation

Correct Answer

The permissions matrix for mirrored catalogs intentionally differs from the lakehouse’s possible ReadWrite options.

Incorrect Answers

Mirrored catalog OneLake security exposes Read-only roles. An unrelated workspace Contributor role does not create source-system write authority.

The underlying Fabric item type and source ownership are unchanged by a display-name update. The role support matrix still limits permissions.

Streaming ingestion routes events; it does not change mirrored catalog authorization or grant editing permission in the external producer.

Question 126

A governance review checks a read-only mirrored catalog share. What is the relevant acceptance test?

Run a query only as the mirrored catalog’s workspace Admin and call the share least-privileged.
Inspect that the mirrored catalog name appears in the OneLake navigation pane and skip attempts to write.
As the designated consumer, query the granted mirrored data and verify unauthorized data paths and attempted changes remain denied.
Grant Contributor rights first so the consumer can perform all tests, including write.

Explanation

Correct Answer

Testing both positive read and negative write/unrelated-read outcomes proves least privilege for the mirrored item without implying source ownership.

Incorrect Answers

An Admin has broader scope than the designated consumer, so this cannot prove the consumer is restricted to the approved mirrored content.

Discoverability does not validate read scoping or the required read-only boundary. An attempted unauthorized modification must be denied.

Escalating privileges changes the subject of the test and risks permitting unrelated modifications, contrary to the intended read-only share.

Question 127

A warehouse pipeline must start only after a file is successfully delivered to a particular OneLake folder, not every morning. What trigger design should be used?

Configure a weekday schedule and shorten its recurrence to one minute.
Configure an Eventstream that ingests file contents but leave the pipeline without an event trigger.
Create a storage-event trigger for the lakehouse root with no folder or event-type filter.
Create a supported storage-event trigger for the designated folder and file-created event, with filtering to avoid unrelated arrivals.

Explanation

Correct Answer

An event-driven trigger associates pipeline submission with a scoped storage change, rather than an unrelated time-based schedule.

Incorrect Answers

Polling every minute is still a time-based schedule and causes executions unrelated to a new file. The requirement is a storage-created event at an exact path.

An Eventstream can route event data but does not automatically invoke the specified Data Factory pipeline unless the supported trigger is wired to it.

A root-level subscription can invoke the pipeline for unrelated arrivals. The scenario requires only created files in the particular folder to start ETL.

Question 128

A pipeline is configured on a weekday schedule but never responds when a partner drops files midday. What is the primary orchestration mismatch?

A schedule does not listen for storage-created events; the pipeline needs a supported event trigger for the relevant source and event type.
The copied file has not been optimized as a Delta table yet.
The storage account has no linked semantic model refresh plan.
The watched OneLake path contains a file name with an unsupported special character.

Explanation

Correct Answer

Time-based scheduling and event subscriptions are distinct mechanisms, so an unscheduled arrival cannot automatically cause a scheduled-only run.

Incorrect Answers

The pipeline does not react to partner file arrivals because it is invoked by a calendar schedule. Delta table maintenance affects storage after ingestion, not event subscription.

A semantic model refresh is a downstream consumer operation; it does not turn a scheduled Fabric pipeline into a listener for file-created notifications.

The scenario specifies that no event listener is configured, only a weekday schedule. A file-name hypothesis is not the cause of failing to start on midday arrival.

Question 129

After creating a OneLake file-arrival trigger, which evidence shows that the exact file event caused an ETL run?

Inspect only the pipeline schedule history and find a recent overnight run.
Upload a controlled file into the watched location, then correlate the matching trigger event and pipeline run ID with the observed file name.
Upload the test file to a different lakehouse folder and infer that the intended trigger matched.
Confirm the file is present but do not correlate its event to a run ID.

Explanation

Correct Answer

An event-to-run correlation validates both the trigger subscription and its path filter rather than simply proving the pipeline can run manually.

Incorrect Answers

A historical scheduled run cannot establish that a controlled file creation emitted the intended trigger event and caused a new pipeline invocation.

The configured path filter is part of the contract. A test outside the watched location does not prove that the designated folder is subscribed correctly.

File existence alone is insufficient; a previously scheduled pipeline might have run independently. The trigger payload and resulting run need to be correlated.

Question 130

A Fabric pipeline must run Monday through Friday at 02:00 in the finance team’s specified local time zone. What is the right schedule configuration?

Use a UTC 02:00 recurrence for a business that requires 02:00 local time throughout DST.
Trigger at 02:00 daily including Saturday and Sunday, then filter the output data later.
Create a fixed weekday schedule with the intended local 02:00 time and the named business time zone, then review DST occurrence behavior.
Read the author’s browser time zone on every pipeline run instead of selecting a named schedule zone.

Explanation

Correct Answer

A named schedule time zone is needed so the specified business hour, rather than a fixed UTC offset, controls submission times.

Incorrect Answers

A UTC-only time can shift relative to a daylight-saving business zone, so it does not preserve the requested local wall-clock recurrence.

A daily run violates the specified Monday-through-Friday execution calendar even if downstream rows are filtered.

A schedule is evaluated by its configured time-zone/recurrence rules. The author device locale does not provide an audited stable business-zone setting.

Implementing Data Engineering Solutions Using Microsoft Fabric (DP-700) Practice Tests

Microsoft DP-700 Practice Test 11 - 10 Questions (Last Reviewed 24-Oct-2026)
Microsoft DP-700 Practice Test 12 - 10 Questions (Last Reviewed 23-Oct-2026)
Microsoft DP-700 Practice Test 13 - 10 Questions (Last Reviewed 22-Oct-2026)
Microsoft DP-700 Practice Test 14 - 10 Questions (Last Reviewed 21-Oct-2026)
Microsoft DP-700 Practice Test 15 - 10 Questions (Last Reviewed 20-Oct-2026)

Pass Your Microsoft DP-700 Exam Easy!

Question 120

Explanation

Correct Answer

Incorrect Answers

Question 121

Explanation

Correct Answer

Incorrect Answers

Question 122

Explanation

Correct Answers

Incorrect Answers

Question 123

Explanation

Correct Answer

Incorrect Answers

Question 124

Explanation

Correct Answer

Incorrect Answers

Question 125

Explanation

Correct Answer

Incorrect Answers

Question 126

Explanation

Correct Answer

Incorrect Answers

Question 127

Explanation

Correct Answer

Incorrect Answers

Question 128

Explanation

Correct Answer

Incorrect Answers

Question 129

Explanation

Correct Answer

Incorrect Answers

Question 130

Explanation

Correct Answer

Incorrect Answers

Implementing Data Engineering Solutions Using Microsoft Fabric (DP-700) Practice Tests