Microsoft Fabric Data Engineer Associate DP-700 Practice Question
You manage a Microsoft Fabric workspace that contains a lakehouse named ContosoSales. Historical sales files are stored in an Azure Data Lake Storage Gen2 (ADLS Gen2) account that is not linked to Fabric. You must expose the folder /raw/sales/ in ADLS Gen2 to users of ContosoSales so that they can query the data from SQL analytics endpoints without copying the files into OneLake. Security administrators insist that:
Access to the ADLS Gen2 account continues to be controlled with Azure role-based access control (Azure RBAC).
Finance analysts who already have Storage Blob Data Reader rights on the ADLS Gen2 container must automatically be able to query the data from Fabric.
Which action should you perform when you create the shortcut in ContosoSales to meet these requirements?
Copy the files into a new managed table in the lakehouse and grant Fabric item-level permissions instead of creating a shortcut.
Configure the shortcut to use Azure Active Directory passthrough authentication.
Create the shortcut with anonymous (public) access and rely on Fabric workspace roles for security.
Configure the shortcut to use a service principal that has Storage Blob Data Reader rights on the container.
When you create a shortcut from a Fabric lakehouse to an external ADLS Gen2 location, you can choose Azure Active Directory (Azure AD) passthrough as the authentication method. With Azure AD passthrough, OneLake uses each caller's own Azure AD identity to access the underlying storage. Therefore any user who has the necessary Azure RBAC role assignments (for example, Storage Blob Data Reader) on the ADLS Gen2 container will automatically be able to read the data when they query through the lakehouse's SQL endpoint. Because access is enforced by the storage account, you do not need to provision or share a service principal, nor can you satisfy the requirement by selecting anonymous access or by copying the data into OneLake. Azure AD passthrough is the only option that keeps authorization in ADLS Gen2 while avoiding data duplication, so enabling Azure AD passthrough during shortcut creation is the correct choice.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Azure Active Directory passthrough authentication?
Open an interactive chat with Bash
What is the role of Azure role-based access control (RBAC) in this setup?
Open an interactive chat with Bash
Why is copying the data into OneLake not a suitable solution in this case?
Open an interactive chat with Bash
Microsoft Fabric Data Engineer Associate DP-700
Ingest and transform data
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .