Microsoft Fabric Data Engineer Associate DP-700 Practice Question
You manage a Microsoft Fabric workspace that contains a Lakehouse with a SQL analytics endpoint. The Sales table includes a column named CostPrice that only Finance users should be able to read. Members of the SalesReaders security group must be able to run SELECT queries against the Sales table but must be prevented from viewing or discovering the CostPrice column. Which approach should you implement?
Define a row-level security filter on the Sales table to exclude the CostPrice column from query results
Grant SELECT on the Sales table to SalesReaders and then explicitly DENY SELECT on the CostPrice column for the same group
Apply a Confidential sensitivity label to the CostPrice column and enable automatic encryption
Create a dynamic data masking rule that fully masks the CostPrice column for SalesReaders
In Fabric's SQL analytics endpoint you can secure individual columns by granting table-level SELECT permission and then explicitly denying SELECT on the sensitive columns. Because DENY permissions override GRANT, SalesReaders can query every other column in the Sales table but any attempt to reference CostPrice will fail, and metadata for that column is hidden. Dynamic data masking does not block column access-it only obscures returned values. Row-level security filters rows, not columns. Sensitivity labels classify data but do not enforce permission-based blocking within the database. Therefore, using GRANT SELECT on the table combined with DENY SELECT on the CostPrice column is the correct solution.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the GRANT and DENY permission system in Microsoft Fabric SQL analytics endpoint?
Open an interactive chat with Bash
How does DENY permission hide metadata for a column?
Open an interactive chat with Bash
Why is dynamic data masking insufficient for blocking column access in SQL analytics endpoints?
Open an interactive chat with Bash
Microsoft Fabric Data Engineer Associate DP-700
Implement and manage an analytics solution
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .