Microsoft Fabric Data Engineer Associate DP-700 Practice Question
You manage a Microsoft Fabric warehouse that contains a table named Employees with a column called SocialSecurityNumber that stores U.S. SSNs. Business analysts already have SELECT permission on the table so they can create reports, but only members of the PayrollAdmin security group are allowed to see the real SSN values. All other users must receive obfuscated values when they query the column. You must meet the requirement without creating additional copies of the data. Which Microsoft Fabric security feature should you configure?
Create a row-level security policy that filters rows based on user membership in the PayrollAdmin group.
Use T-SQL to deny SELECT permission on the SocialSecurityNumber column for all users except the PayrollAdmin group.
Apply a highly confidential sensitivity label to the Employees table to conceal the SocialSecurityNumber values.
Configure dynamic data masking on the SocialSecurityNumber column and grant UNMASK permission only to the PayrollAdmin group.
Dynamic data masking (DDM) in a Fabric warehouse lets you define masking rules that are applied at query time. When DDM is enabled on the SocialSecurityNumber column you can grant UNMASK permission only to the PayrollAdmin group. Users without UNMASK continue to have SELECT permission and can query the table, but the SSN values are automatically returned in a masked format, satisfying the requirement without creating separate tables or views. Row-level security restricts entire rows, not individual column values. Sensitivity labels classify data but do not change query results. Denying column-level SELECT permission would block access to the column entirely rather than show masked values.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is dynamic data masking (DDM)?
Open an interactive chat with Bash
How does UNMASK permission work in dynamic data masking?
Open an interactive chat with Bash
What is the difference between dynamic data masking and row-level security?
Open an interactive chat with Bash
Microsoft Fabric Data Engineer Associate DP-700
Implement and manage an analytics solution
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .