Microsoft Fabric Data Engineer Associate DP-700 Practice Question
You manage a Microsoft Fabric Warehouse named SalesDW in a workspace. The Orders table contains a SensitiveAmount column that must be completely hidden from all analysts except members of the Azure AD group FinanceLeads. Analysts still need to query every other column in the table. Which approach meets this requirement with minimal ongoing administration?
Create a row-level security policy that filters SensitiveAmount for non-FinanceLeads users.
Hide SensitiveAmount with object-level security in a semantic model and have analysts query through that model only.
Apply dynamic data masking to SensitiveAmount and grant SELECT on Orders to all analysts.
Create a database role for regular analysts, DENY SELECT on SensitiveAmount to that role, and GRANT SELECT on Orders to FinanceLeads.
Column-level security in a Microsoft Fabric Warehouse is implemented with the GRANT and DENY T-SQL statements. The simplest approach is to separate users into two roles:
Add all analysts who should not see the sensitive data to a database role named AnalystsNoSensitive and DENY SELECT on the SensitiveAmount column to that role.
Grant SELECT on the entire Orders table (or explicitly on the SensitiveAmount column) to the FinanceLeads group. Because the DENY is scoped only to the AnalystsNoSensitive role-not to the public role-it blocks access for ordinary analysts while FinanceLeads retains full visibility. Dynamic data masking leaves the column visible (only masks its values), row-level security filters rows not columns, and object-level security in a Power BI model cannot protect direct SQL access to the warehouse.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is column-level security in Microsoft Fabric Warehouse?
Open an interactive chat with Bash
How is DENY different from GRANT in T-SQL?
Open an interactive chat with Bash
What is the purpose of database roles in managing access control?
Open an interactive chat with Bash
Microsoft Fabric Data Engineer Associate DP-700
Implement and manage an analytics solution
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .