Configure security and governance
12 practice questions under this official exam objective (DP-700) — each with the community-verified answer, a full option-by-option explanation and instant feedback.
Which workspace role meets least privilege for viewing items and updating DW1?
Fabric workspace roles control item visibility, while warehouse object-level permissions grant T-SQL access. This page explains why Viewer is the leas
Which Role Creates a New Fabric Domain and Subdomains
Microsoft Fabric domains organize workspaces into tenant-level governance structures, with subdomains nesting beneath them. Because only a Fabric admi
Isolating PII Tables in a Fabric Lakehouse
In Microsoft Fabric, workspace-level roles are the granularity boundary for lakehouse access, so protecting the Employee table's PII means physically
How Do Fabric Default Domains Affect Workspace3 Access?
Microsoft Fabric default-domain membership can assign a new workspace to a domain and make group members domain contributors, but it does not grant wo
Which authentication should Azure DevOps use for Fabric deployment pipeline API?
Azure DevOps automation that invokes a Fabric deployment pipeline API needs a non-interactive identity with Fabric permissions. This page establishes
Updating warehouse tables requires at least the Contributor workspace role because Write is not shareable to a Viewer
To let a user both view all workspace items and update tables in a Fabric warehouse, assign the Contributor workspace role. The warehouse Write permis
Only a Fabric admin can create top-level domains; domain admin handles subdomains
Creating a new top-level domain in Microsoft Fabric requires the Fabric admin role. A domain admin can create and manage subdomains and assign workspa
Which Warehouse Object Implements Row-Level Security in Fabric?
Row-level security in a Microsoft Fabric warehouse is built from a user-defined function that returns a yes/no predicate for each row, which is then b
A security predicate function is the warehouse object behind row-level security
Implementing row-level security in a Fabric warehouse requires a user-defined inline table-valued FUNCTION that encodes the filter predicate; a securi
Grant analysts gold-layer access by sharing the lakehouse with Read all SQL Endpoint data
Sharing the gold-layer lakehouse with the DataAnalysts group and granting Read all SQL Endpoint data gives T-SQL read access to its Delta tables witho
Share Lakehouse1 directly with Read all SQL endpoint data to scope User1 access
Sharing Lakehouse1 directly with User1 and selecting Read all SQL endpoint data grants T-SQL read access to the lakehouse tables, keeps the underlying
How to Mask Phone in Fabric Warehouse for Group1 Only?
Fabric Warehouse dynamic data masking hides column values unless a principal holds UNMASK. This page establishes that Phone receives a partial(0,"XXX"