0% found this document useful (0 votes)
81 views

DP 201

Trey Research is developing traffic monitoring solutions using sensor data collected from highways. The solutions include: 1. Backtrack - Reports on data related to a specific vehicle license plate from the SensorData collection. 2. Planning Assistance - Stores sensor data in an Azure SQL Database for analysis. Data is loaded weekly using Azure Data Factory. 3. Real Time Response - Requires maximizing performance. The case study provides requirements for designing the data storage and processing solutions for these applications.
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
81 views

DP 201

Trey Research is developing traffic monitoring solutions using sensor data collected from highways. The solutions include: 1. Backtrack - Reports on data related to a specific vehicle license plate from the SensorData collection. 2. Planning Assistance - Stores sensor data in an Azure SQL Database for analysis. Data is loaded weekly using Azure Data Factory. 3. Real Time Response - Requires maximizing performance. The case study provides requirements for designing the data storage and processing solutions for these applications.
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 200

DP-201.prepaway.premium.exam.

166q

Number: DP-201
Passing Score: 800
Time Limit: 120 min
File Version: 10.0

DP-201

Designing an Azure Data Solution

Version 10.0

62D227AA5C77F5C766AC37B5740F344D
Design Azure data storage solutions

Testlet 1

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Background

Trey Research is a technology innovator. The company partners with regional transportation department office
to build solutions that improve traffic flow and safety.

The company is developing the following solutions:

Regional transportation departments installed traffic sensor systems on major highways across North America.
Sensors record the following information each time a vehicle passes in front of a sensor:

62D227AA5C77F5C766AC37B5740F344D
Time
Location in latitude and longitude
Speed in kilometers per second (kmps)
License plate number
Length of vehicle in meters

Sensors provide data by using the following structure:

Traffic sensors will occasionally capture an image of a vehicle for debugging purposes.
You must optimize performance of saving/storing vehicle images.

Traffic sensor data

Sensors must have permission only to add items to the SensorData collection.
Traffic data insertion rate must be maximized.
Once every three months all traffic sensor data must be analyzed to look for data patterns that indicate
sensor malfunctions.
Sensor data must be stored in a Cosmos DB named treydata in a collection named SensorData
The impact of vehicle images on sensor data throughout must be minimized.

Backtrack

This solution reports on all data related to a specific vehicle license plate. The report must use data from the
SensorData collection. Users must be able to filter vehicle data in the following ways:

vehicles on a specific road


vehicles driving above the speed limit

Planning Assistance

Data used for Planning Assistance must be stored in a sharded Azure SQL Database.

Data from the Sensor Data collection will automatically be loaded into the Planning Assistance database once
a week by using Azure Data Factory. You must be able to manually trigger the data load process.

Privacy and security policy

Azure Active Directory must be used for all services where it is available.
For privacy reasons, license plate number information must not be accessible in Planning Assistance.

62D227AA5C77F5C766AC37B5740F344D
Unauthorized usage of the Planning Assistance data must be detected as quickly as possible. Unauthorized
usage is determined by looking for an unusual pattern of usage.
Data must only be stored for seven years.

Performance and availability

The report for Backtrack must execute as quickly as possible.


The SLA for Planning Assistance is 70 percent, and multiday outages are permitted.
All data must be replicated to multiple geographic regions to prevent data loss.
You must maximize the performance of the Real Time Response system.

Financial requirements

Azure resource costs must be minimized where possible.

QUESTION 1
You need to design the vehicle images storage solution.

What should you recommend?

A. Azure Media Services


B. Azure Premium Storage account
C. Azure Redis Cache
D. Azure Cosmos DB

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Premium Storage stores data on the latest technology Solid State Drives (SSDs) whereas Standard Storage
stores data on Hard Disk Drives (HDDs). Premium Storage is designed for Azure Virtual Machine workloads
which require consistent high IO performance and low latency in order to host IO intensive workloads like
OLTP, Big Data, and Data Warehousing on platforms like SQL Server, MongoDB, Cassandra, and others.
With Premium Storage, more customers will be able to lift-and-shift demanding enterprise applications to the
cloud.

Scenario: Traffic sensors will occasionally capture an image of a vehicle for debugging purposes.
You must optimize performance of saving/storing vehicle images.
The impact of vehicle images on sensor data throughout must be minimized.

Reference:
https://azure.microsoft.com/es-es/blog/introducing-premium-storage-high-performance-storage-for-azure-
virtual-machine-workloads/

QUESTION 2
You need to design a sharding strategy for the Planning Assistance database.

What should you recommend?

A. a list mapping shard map on the binary representation of the License Plate column
B. a range mapping shard map on the binary representation of the speed column
C. a list mapping shard map on the location column
D. a range mapping shard map on the time column

Correct Answer: A
Section: (none)

62D227AA5C77F5C766AC37B5740F344D
Explanation

Explanation/Reference:
Explanation:
Data used for Planning Assistance must be stored in a sharded Azure SQL Database.

A shard typically contains items that fall within a specified range determined by one or more attributes of the
data. These attributes form the shard key (sometimes referred to as the partition key). The shard key should be
static. It shouldn't be based on data that might change.

Reference:
https://docs.microsoft.com/en-us/azure/architecture/patterns/sharding

QUESTION 3
HOTSPOT

You need to design the SensorData collection.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Box 1: Eventual
Traffic data insertion rate must be maximized.

Sensor data must be stored in a Cosmos DB named treydata in a collection named SensorData
With Azure Cosmos DB, developers can choose from five well-defined consistency models on the consistency
spectrum. From strongest to more relaxed, the models include strong, bounded staleness, session, consistent
prefix, and eventual consistency.

Box 2: License plate


This solution reports on all data related to a specific vehicle license plate. The report must use data from the
SensorData collection.

Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/consistency-levels

QUESTION 4
You need to recommend an Azure SQL Database pricing tier for Planning Assistance.

Which pricing tier should you recommend?

A. Business critical Azure SQL Database single database

62D227AA5C77F5C766AC37B5740F344D
B. General purpose Azure SQL Database Managed Instance
C. Business critical Azure SQL Database Managed Instance
D. General purpose Azure SQL Database single database

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Azure resource costs must be minimized where possible.
Data used for Planning Assistance must be stored in a sharded Azure SQL Database.
The SLA for Planning Assistance is 70 percent, and multiday outages are permitted.

QUESTION 5
HOTSPOT

You need to design the Planning Assistance database.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Box 1: No
Data used for Planning Assistance must be stored in a sharded Azure SQL Database.

Box 2: Yes

Box 3: Yes
Planning Assistance database will include reports tracking the travel of a single vehicle

62D227AA5C77F5C766AC37B5740F344D
Design Azure data storage solutions

Testlet 2

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Overview

You develop data engineering solutions for Graphics Design Institute, a global media company with offices in
New York City, Manchester, Singapore, and Melbourne.

The New York office hosts SQL Server databases that stores massive amounts of customer data. The
company also stores millions of images on a physical server located in the New York office. More than 2 TB of
image data is added each day. The images are transferred from customer devices to the server in New York.

Many images have been placed on this server in an unorganized manner, making it difficult for editors to
search images. Images should automatically have object and color tags generated. The tags must be stored in
a document database, and be queried by SQL.

You are hired to design a solution that can store, transform, and visualize customer data.

Requirements

Business

The company identifies the following business requirements:

You must transfer all images and customer data to cloud storage and remove on-premises servers.
You must develop an analytical processing solution for transforming customer data.
You must develop an image object and color tagging solution.
Capital expenditures must be minimized.
Cloud resource costs must be minimized.

Technical

The solution has the following technical requirements:

Tagging data must be uploaded to the cloud from the New York office location.

62D227AA5C77F5C766AC37B5740F344D
Tagging data must be replicated to regions that are geographically close to company office locations.
Image data must be stored in a single data store at minimum cost.
Customer data must be analyzed using managed Spark clusters.
Power BI must be used to visualize transformed customer data.
All data must be backed up in case disaster recovery is required.

Security and optimization

All cloud data must be encrypted at rest and in transit. The solution must support:

parallel processing of customer data


hyper-scale storage of images
global region data replication of processed image data

QUESTION 1
You need to recommend a solution for storing the image tagging data.

What should you recommend?

A. Azure File Storage


B. Azure Cosmos DB
C. Azure Blob Storage
D. Azure SQL Database
E. Azure Synapse Analytics

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Image data must be stored in a single data store at minimum cost.
Note: Azure Blob storage is Microsoft's object storage solution for the cloud. Blob storage is optimized for
storing massive amounts of unstructured data. Unstructured data is data that does not adhere to a particular
data model or definition, such as text or binary data.

Blob storage is designed for:


Serving images or documents directly to a browser.
Storing files for distributed access.
Streaming video and audio.
Writing to log files.
Storing data for backup and restore, disaster recovery, and archiving.
Storing data for analysis by an on-premises or Azure-hosted service.

Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blobs-introduction

QUESTION 2
You need to design the solution for analyzing customer data.

What should you recommend?

A. Azure Databricks
B. Azure Data Lake Storage
C. Azure Synapse Analytics
D. Azure Cognitive Services
E. Azure Batch

62D227AA5C77F5C766AC37B5740F344D
Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Customer data must be analyzed using managed Spark clusters.
You create spark clusters through Azure Databricks.

Reference:
https://docs.microsoft.com/en-us/azure/azure-databricks/quickstart-create-databricks-workspace-portal

QUESTION 3
You need to recommend a solution for storing customer data.

What should you recommend?

A. Azure Synapse Analytics


B. Azure Stream Analytics
C. Azure Databricks
D. Azure SQL Database

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
From the scenario:
Customer data must be analyzed using managed Spark clusters.
All cloud data must be encrypted at rest and in transit. The solution must support: parallel processing of
customer data.

Reference:
https://www.microsoft.com/developerblog/2019/01/18/running-parallel-apache-spark-notebook-workloads-on-
azure-databricks/

QUESTION 4
HOTSPOT

You need to design storage for the solution.

Which storage services should you recommend? To answer, select the appropriate configuration in the answer
area.

NOTE: Each correct selection is worth one point.

Hot Area:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Images: Azure Data Lake Storage


Scenario: Image data must be stored in a single data store at minimum cost.

Customer data: Azure Blob Storage


Scenario: Customer data must be analyzed using managed Spark clusters.

Spark clusters in HDInsight are compatible with Azure Storage and Azure Data Lake Storage.
Azure Storage includes these data services: Azure Blob, Azure Files, Azure Queues, and Azure Tables.

Reference:
https://docs.microsoft.com/en-us/azure/hdinsight/spark/apache-spark-overview

62D227AA5C77F5C766AC37B5740F344D
Design Azure data storage solutions

Testlet 3

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Background

Current environment

The company has the following virtual machines (VMs):

Requirements

Storage and processing

You must be able to use a file system view of data stored in a blob.
You must build an architecture that will allow Contoso to use the DB FS filesystem layer over a blob store. The
architecture will need to support data files, libraries, and images. Additionally, it must provide a web-based
interface to documents that contain runnable command, visualizations, and narrative text such as a notebook.

CONT_SQL3 requires an initial scale of 35000 IOPS.


CONT_SQL1 and CONT_SQL2 must use the vCore model and should include replicas. The solution must
support 8000 IOPS.
The storage should be configured to optimized storage for database OLTP workloads.

62D227AA5C77F5C766AC37B5740F344D
Migration

You must be able to independently scale compute and storage resources.


You must migrate all SQL Server workloads to Azure. You must identify related machines in the on-
premises environment, get disk size data usage information.
Data from SQL Server must include zone redundant storage.
You need to ensure that app components can reside on-premises while interacting with components that
run in the Azure public cloud.
SAP data must remain on-premises.
The Azure Site Recovery (ASR) results should contain per-machine data.

Business requirements

You must design a regional disaster recovery topology.


The database backups have regulatory purposes and must be retained for seven years.
CONT_SQL1 stores customers sales data that requires ETL operations for data analysis. A solution is
required that reads data from SQL, performs ETL, and outputs to Power BI. The solution should use
managed clusters to minimize costs. To optimize logistics, Contoso needs to analyze customer sales data
to see if certain products are tied to specific times in the year.
The analytics solution for customer sales data must be available during a regional outage.

Security and auditing

Contoso requires all corporate computers to enable Windows Firewall.


Azure servers should be able to ping other Contoso Azure servers.
Employee PII must be encrypted in memory, in motion, and at rest. Any data encrypted by SQL Server must
support equality searches, grouping, indexing, and joining on the encrypted data.
Keys must be secured by using hardware security modules (HSMs).
CONT_SQL3 must not communicate over the default ports

Cost

All solutions must minimize cost and resources.


The organization does not want any unexpected charges.
The data engineers must set the SQL Data Warehouse compute resources to consume 300 DWUs.
CONT_SQL2 is not fully utilized during non-peak hours. You must minimize resource costs for during non-
peak hours.

QUESTION 1
You need to design a solution to meet the SQL Server storage requirements for CONT_SQL3.

Which type of disk should you recommend?

A. Standard SSD Managed Disk


B. Premium SSD Managed Disk
C. Ultra SSD Managed Disk

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
CONT_SQL3 requires an initial scale of 35000 IOPS.
Ultra SSD Managed Disk Offerings

62D227AA5C77F5C766AC37B5740F344D
The following table provides a comparison of ultra solid-state-drives (SSD) (preview), premium SSD, standard
SSD, and standard hard disk drives (HDD) for managed disks to help you decide what to use.

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/windows/disks-types

QUESTION 2
You need to recommend an Azure SQL Database service tier.

What should you recommend?

A. Business Critical
B. General Purpose
C. Premium
D. Standard
E. Basic

Correct Answer: C
Section: (none)
Explanation

62D227AA5C77F5C766AC37B5740F344D
Explanation/Reference:
Explanation:
The data engineers must set the SQL Data Warehouse compute resources to consume 300 DWUs.

Note: There are three architectural models that are used in Azure SQL Database:
General Purpose/Standard
Business Critical/Premium
Hyperscale

Incorrect Answers:
A: Business Critical service tier is designed for the applications that require low-latency responses from the
underlying SSD storage (1-2 ms in average), fast recovery if the underlying infrastructure fails, or need to off-
load reports, analytics, and read-only queries to the free of charge readable secondary replica of the primary
database.

Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-service-tier-business-critical

QUESTION 3
You need to recommend the appropriate storage and processing solution?

What should you recommend?

A. Enable auto-shrink on the database.


B. Flush the blob cache using Windows PowerShell.
C. Enable Apache Spark RDD (RDD) caching.
D. Enable Databricks IO (DBIO) caching.
E. Configure the reading speed using Azure Data Studio.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Scenario: You must be able to use a file system view of data stored in a blob. You must build an architecture
that will allow Contoso to use the DB FS filesystem layer over a blob store.

Databricks File System (DBFS) is a distributed file system installed on Azure Databricks clusters. Files in
DBFS persist to Azure Blob storage, so you won’t lose data even after you terminate a cluster.

The Databricks Delta cache, previously named Databricks IO (DBIO) caching, accelerates data reads by
creating copies of remote files in nodes’ local storage using a fast intermediate data format. The data is cached
automatically whenever a file has to be fetched from a remote location. Successive reads of the same data are
then performed locally, which results in significantly improved reading speed.

Reference:
https://docs.databricks.com/delta/delta-cache.html#delta-cache

62D227AA5C77F5C766AC37B5740F344D
Design Azure data storage solutions

Testlet 4

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Overview

General Overview

ADatum Corporation is a medical company that has 5,000 physicians located in more than 300 hospitals
across the US. The company has a medical department, a sales department, a marketing department, a
medical research department, and a human resources department.

You are redesigning the application environment of ADatum.

Physical Locations

ADatum has three main offices in New York, Dallas, and Los Angeles. The offices connect to each other by
using a WAN link. Each office connects directly to the Internet. The Los Angeles office also has a datacenter
that hosts all the company's applications.

Existing Environment

Health Review

ADatum has a critical OLTP web application named Health Review that physicians use to track billing, patient
care, and overall physician best practices.

Health Interface

ADatum has a critical application named Health Interface that receives hospital messages related to patient
care and status updates. The messages are sent in batches by each hospital's enterprise relationship
management (ERM) system by using a VPN. The data sent from each hospital can have varying columns and
formats.

Currently, a custom C# application is used to send the data to Health Interface. The application uses
deprecated libraries and a new solution must be designed for this functionality.

62D227AA5C77F5C766AC37B5740F344D
Health Insights

ADatum has a web-based reporting system named Health Insights that shows hospital and patient insights to
physicians and business users. The data is created from the data in Health Review and Health Interface, as
well as manual entries.

Database Platform

Currently, the databases for all three applications are hosted on an out-of-date VMware cluster that has a
single instance of Microsoft SQL Server 2012.

Problem Statements

ADatum identifies the following issues in its current environment:

Over time, the data received by Health Interface from the hospitals has slowed, and the number of
messages has increased.
When a new hospital joins ADatum, Health Interface requires a schema modification due to the lack of data
standardization.
The speed of batch data processing is inconsistent.

Business Requirements

Business Goals

ADatum identifies the following business goals:

Migrate the applications to Azure whenever possible.


Minimize the development effort required to perform data movement.
Provide continuous integration and deployment for development, test, and production environments.
Provide faster access to the applications and the data and provide more consistent application
performance.
Minimize the number of services required to perform data processing, development, scheduling, monitoring,
and the operationalizing of pipelines.

Health Review Requirements

ADatum identifies the following requirements for the Health Review application:

Ensure that sensitive health data is encrypted at rest and in transit.


Tag all the sensitive health data in Health Review. The data will be used for auditing.

Health Interface Requirements

ADatum identifies the following requirements for the Health Interface application:

Upgrade to a data storage solution that will provide flexible schemas and increased throughput for writing
data. Data must be regionally located close to each hospital, and reads must display be the most recent
committed version of an item.
Reduce the amount of time it takes to add data from new hospitals to Health Interface.
Support a more scalable batch processing solution in Azure.
Reduce the amount of development effort to rewrite existing SQL queries.

Health Insights Requirements

ADatum identifies the following requirements for the Health Insights application:

The analysis of events must be performed over time by using an organizational date dimension table.
The data from Health Interface and Health Review must be available in Health Insights within 15 minutes of
being committed.

62D227AA5C77F5C766AC37B5740F344D
The new Health Insights application must be built on a massively parallel processing (MPP) architecture
that will support the high performance of joins on large fact tables.

QUESTION 1
You need to design a solution that meets the business requirements of Health Insights.

What should you include in the recommendation?

A. Azure Cosmos DB that uses the Gremlin API


B. Azure Data Factory
C. Azure Cosmos DB that uses the SQL API
D. Azure Databricks

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Azure Synapse Analytics is a cloud-based enterprise data warehouse that leverages massively parallel
processing (MPP) to quickly run complex queries across petabytes of data. Use SQL Data Warehouse as a
key component of a big data solution.

You can access Azure Synapse Analytics (SQL DW) from Databricks using the SQL Data Warehouse
connector (referred to as the SQL DW connector), a data source implementation for Apache Spark that uses
Azure Blob Storage, and PolyBase in SQL DW to transfer large volumes of data efficiently between a
Databricks cluster and a SQL DW instance.

Scenario: ADatum identifies the following requirements for the Health Insights application:
The new Health Insights application must be built on a massively parallel processing (MPP) architecture
that will support the high performance of joins on large fact tables

Reference:
https://docs.databricks.com/data/data-sources/azure/sql-data-warehouse.html

QUESTION 2
HOTSPOT

Which Azure data storage solution should you recommend for each application? To answer, select the
appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Health Review: Azure SQL Database


Scenario: ADatum identifies the following requirements for the Health Review application:
Ensure that sensitive health data is encrypted at rest and in transit.
Tag all the sensitive health data in Health Review. The data will be used for auditing.

Health Interface: Azure Cosmos DB


ADatum identifies the following requirements for the Health Interface application:
Upgrade to a data storage solution that will provide flexible schemas and increased throughput for writing
data. Data must be regionally located close to each hospital, and reads must display be the most recent
committed version of an item.
Reduce the amount of time it takes to add data from new hospitals to Health Interface.
Support a more scalable batch processing solution in Azure.
Reduce the amount of development effort to rewrite existing SQL queries.

Health Insights: Azure Synapse Analytics


Azure Synapse Analytics is a cloud-based enterprise data warehouse that leverages massively parallel
processing (MPP) to quickly run complex queries across petabytes of data. Use SQL Data Warehouse as a
key component of a big data solution.

You can access Azure Synapse Analytics (SQL DW) from Databricks using the SQL Data Warehouse
connector (referred to as the SQL DW connector), a data source implementation for Apache Spark that uses

62D227AA5C77F5C766AC37B5740F344D
Azure Blob Storage, and PolyBase in SQL DW to transfer large volumes of data efficiently between a
Databricks cluster and a SQL DW instance.

Scenario: ADatum identifies the following requirements for the Health Insights application:
The new Health Insights application must be built on a massively parallel processing (MPP) architecture
that will support the high performance of joins on large fact tables

Reference:
https://docs.databricks.com/data/data-sources/azure/sql-data-warehouse.html

QUESTION 3
You need to recommend a solution that meets the data platform requirements of Health Interface. The solution
must minimize redevelopment efforts for the application.

What should you include in the recommendation?

A. Azure Synapse Analytics


B. Azure SQL Database
C. Azure Cosmos DB that uses the SQL API
D. Azure Cosmos DB that uses the Table API

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Scenario: ADatum identifies the following requirements for the Health Interface application:
Reduce the amount of development effort to rewrite existing SQL queries.
Upgrade to a data storage solution that will provide flexible schemas and increased throughput for writing
data. Data must be regionally located close to each hospital, and reads must display be the most recent
committed version of an item.
Reduce the amount of time it takes to add data from new hospitals to Health Interface.
Support a more scalable batch processing solution in Azure.

QUESTION 4
Which consistency level should you use for Health Interface?

A. Consistent Prefix
B. Session
C. Bounded Staleness
D. Strong

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Scenario: ADatum identifies the following requirements for the Health Interface application:
..reads must display be the most recent committed version of an item.

Azure Cosmos DB consistency levels include:


Strong: Strong consistency offers a linearizability guarantee. Linearizability refers to serving requests
concurrently. The reads are guaranteed to return the most recent committed version of an item. A client never
sees an uncommitted or partial write. Users are always guaranteed to read the latest committed write.

62D227AA5C77F5C766AC37B5740F344D
Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/consistency-levels

QUESTION 5
HOTSPOT

You need to design the storage for the Health Insights data platform.

Which types of tables should you include in the design? To answer, select the appropriate options in the
answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Box 1: Hash-distributed tables


The new Health Insights application must be built on a massively parallel processing (MPP) architecture that
will support the high performance of joins on large fact tables.

Hash-distributed tables improve query performance on large fact tables.

Box 2: Round-robin distributed tables


A round-robin distributed table distributes table rows evenly across all distributions. The assignment of rows to
distributions is random.

Scenario:
ADatum identifies the following requirements for the Health Insights application:
The new Health Insights application must be built on a massively parallel processing (MPP) architecture
that will support the high performance of joins on large fact tables.

Reference:
https://docs.microsoft.com/en-us/azure/sql-data-warehouse/sql-data-warehouse-tables-distribute

62D227AA5C77F5C766AC37B5740F344D
Design Azure data storage solutions

Testlet 5

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you
would like to complete each case. However, there may be additional case studies and sections on this
exam. You must manage your time to ensure that you are able to complete all questions included on this exam
in the time provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Overview

You are a data engineer for Trey Research. The company is close to completing a joint project with the
government to build smart highways infrastructure across North America. This involves the placement of
sensors and cameras to measure traffic flow, car speed, and vehicle details.

You have been asked to design a cloud solution that will meet the business and technical requirements of the
smart highway.

Solution components

Telemetry Capture

The telemetry capture system records each time a vehicle passes in front of a sensor. The sensors run on a
custom embedded operating system and record the following telemetry data:

Time
Location in latitude and longitude
Speed in kilometers per hour (kmph)
Length of vehicle in meters

Visual Monitoring

The visual monitoring system is a network of approximately 1,000 cameras placed near highways that capture
images of vehicle traffic every 2 seconds. The cameras record high resolution images. Each image is
approximately 3 MB in size.

Requirements: Business

The company identifies the following business requirements:

External vendors must be able to perform custom analysis of data using machine learning technologies.

62D227AA5C77F5C766AC37B5740F344D
You must display a dashboard on the operations status page that displays the following metrics: telemetry,
volume, and processing latency.
Traffic data must be made available to the Government Planning Department for the purpose of modeling
changes to the highway system. The traffic data will be used in conjunction with other data such as
information about events such as sporting events, weather conditions, and population statistics. External
data used during the modeling is stored in on-premises SQL Server 2016 databases and CSV files stored
in an Azure Data Lake Storage Gen2 storage account.
Information about vehicles that have been detected as going over the speed limit during the last 30 minutes
must be available to law enforcement officers. Several law enforcement organizations may respond to
speeding vehicles.
The solution must allow for searches of vehicle images by license plate to support law enforcement
investigations. Searches must be able to be performed using a query language and must support fuzzy
searches to compensate for license plate detection errors.

Requirements: Security

The solution must meet the following security requirements:

External vendors must not have direct access to sensor data or images.
Images produced by the vehicle monitoring solution must be deleted after one month. You must minimize
costs associated with deleting images from the data store.
Unauthorized usage of data must be detected in real time. Unauthorized usage is determined by looking for
unusual usage patterns.
All changes to Azure resources used by the solution must be recorded and stored. Data must be provided
to the security team for incident response purposes.

Requirements: Sensor data

You must write all telemetry data to the closest Azure region. The sensors used for the telemetry capture
system have a small amount of memory available and so must write data as quickly as possible to avoid losing
telemetry data.

QUESTION 1
You need to design the storage for the visual monitoring system.

Which storage solution should you recommend?

A. Azure Blob storage


B. Azure Table storage
C. Azure SQL database
D. Azure Cosmos DB

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Azure Blobs: A massively scalable object store for text and binary data.
Azure Cognitive Search supports fuzzy search. You can use Azure Cognitive Search to index blobs.

Scenario:
The visual monitoring system is a network of approximately 1,000 cameras placed near highways that
capture images of vehicle traffic every 2 seconds. The cameras record high resolution images. Each image
is approximately 3 MB in size.
The solution must allow for searches of vehicle images by license plate to support law enforcement
investigations. Searches must be able to be performed using a query language and must support fuzzy
searches to compensate for license plate detection errors.

62D227AA5C77F5C766AC37B5740F344D
Incorrect Answers:
B: Azure Tables: A NoSQL store for schemaless storage of structured data.

Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction
https://docs.microsoft.com/en-us/azure/search/search-howto-indexing-azure-blob-storage#how-azure-
cognitive-search-indexes-blobs

QUESTION 2
You need to design the storage for the telemetry capture system.

What storage solution should you use in the design?

A. Azure Synapse Analytics


B. Azure Databricks
C. Azure Cosmos DB

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Azure Cosmos DB is a globally distributed database service. You can associate any number of Azure regions
with your Azure Cosmos account and your data is automatically and transparently replicated.

Scenario:
Telemetry Capture
The telemetry capture system records each time a vehicle passes in front of a sensor. The sensors run on a
custom embedded operating system and record the following telemetry data:
Time
Location in latitude and longitude
Speed in kilometers per hour (kmph)
Length of vehicle in meters

You must write all telemetry data to the closest Azure region. The sensors used for the telemetry capture
system have a small amount of memory available and so must write data as quickly as possible to avoid losing
telemetry data.

Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/regional-presence

QUESTION 3
You need to design the solution for the government planning department.

Which services should you include in the design?

A. Azure Synapse Analytics and Elastic Queries


B. Azure SQL Database and Polybase
C. Azure Synapse Analytics and Polybase
D. Azure SQL Database and Elastic Queries

Correct Answer: C
Section: (none)
Explanation

62D227AA5C77F5C766AC37B5740F344D
Explanation/Reference:
Explanation:
PolyBase is a new feature in SQL Server 2016. It is used to query relational and non-relational databases
(NoSQL) such as CSV files.

Scenario: Traffic data must be made available to the Government Planning Department for the purpose of
modeling changes to the highway system. The traffic data will be used in conjunction with other data such as
information about events such as sporting events, weather conditions, and population statistics. External data
used during the modeling is stored in on-premises SQL Server 2016 databases and CSV files stored in an
Azure Data Lake Storage Gen2 storage account.

Reference:
https://www.sqlshack.com/sql-server-2016-polybase-tutorial/

62D227AA5C77F5C766AC37B5740F344D
Design Azure data storage solutions

Testlet 6

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Overview

Litware, Inc. owns and operates 300 convenience stores across the US. The company sells a variety of
packaged foods and drinks, as well as a variety of prepared foods, such as sandwiches and pizzas.

Litware has a loyalty club whereby members can get daily discounts on specific items by providing their
membership number at checkout.

Litware employs business analysts who prefer to analyze data by using Microsoft Power BI, and data scientists
who prefer analyzing data in Azure Databricks notebooks.

Requirements. Business Goals

Litware wants to create a new analytics environment in Azure to meet the following requirements:

See inventory levels across the stores. Data must be updated as close to real time as possible.
Execute ad hoc analytical queries on historical data to identify whether the loyalty club discounts increase
sales of the discounted products.
Every four hours, notify store employees about how many prepared food items to produce based on
historical demand from the sales data.

Requirements. Technical Requirements

Litware identifies the following technical requirements:

Minimize the number of different Azure services needed to achieve the business goals.
Use platform as a service (PaaS) offerings whenever possible and avoid having to provision virtual
machines that must be managed by Litware.
Ensure that the analytical data store is accessible only to the company’s on-premises network and Azure
services.
Use Azure Active Directory (Azure AD) authentication whenever possible.
Use the principle of least privilege when designing security.
Stage inventory data in Azure Data Lake Storage Gen2 before loading the data into the analytical data

62D227AA5C77F5C766AC37B5740F344D
store. Litware wants to remove transient data from Data Lake Storage once the data is no longer in use.
Files that have a modified date that is older than 14 days must be removed.
Limit the business analysts’ access to customer contact information, such as phone numbers, because this
type of data is not analytically relevant.
Ensure that you can quickly restore a copy of the analytical data store within one hour in the event of
corruption or accidental deletion.

Requirements. Planned Environment

Litware plans to implement the following environment:

The application development team will create an Azure event hub to receive real-time sales data, including
store number, date, time, product ID, customer loyalty number, price, and discount amount, from the point
of sale (POS) system and output the data to data storage in Azure.
Customer data, including name, contact information, and loyalty number, comes from Salesforce, a SaaS
application, and can be imported into Azure once every eight hours. Row modified dates are not trusted in
the source table.
Product data, including product ID, name, and category, comes from Salesforce and can be imported into
Azure once every eight hours. Row modified dates are not trusted in the source table.
Daily inventory data comes from a Microsoft SQL server located on a private network.
Litware currently has 5 TB of historical sales data and 100 GB of customer data. The company expects
approximately 100 GB of new data per month for the next year.
Litware will build a custom application named FoodPrep to provide store employees with the calculation
results of how many prepared food items to produce every four hours.
Litware does not plan to implement Azure ExpressRoute or a VPN between the on-premises network and
Azure.

QUESTION 1
Which Azure service should you recommend for the analytical data store so that the business analysts and
data scientists can execute ad hoc queries as quickly as possible?

A. Azure Data Lake Storage Gen2


B. Azure Cosmos DB
C. Azure Stream Analytics
D. Azure Synapse Analytics

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:

There are several differences between a data lake and a data warehouse. Data structure, ideal users,
processing methods, and the overall purpose of the data are the key differentiators.

62D227AA5C77F5C766AC37B5740F344D
Scenario: Litware employs business analysts who prefer to analyze data by using Microsoft Power BI, and data
scientists who prefer analyzing data in Azure Databricks notebooks.

Note: Azure Synapse Analytics formerly known as Azure SQL Data Warehouse.

62D227AA5C77F5C766AC37B5740F344D
Design Azure data storage solutions

Question Set 7

QUESTION 1
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You are designing an HDInsight/Hadoop cluster solution that uses Azure Data Lake Gen1 Storage.

The solution requires POSIX permissions and enables diagnostics logging for auditing.

You need to recommend solutions that optimize storage.

Proposed Solution: Ensure that files stored are larger than 250MB.

Does the solution meet the goal?

A. Yes
B. No

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Depending on what services and workloads are using the data, a good size to consider for files is 256 MB or
greater. If the file sizes cannot be batched when landing in Data Lake Storage Gen1, you can have a separate
compaction job that combines these files into larger ones.

Note: POSIX permissions and auditing in Data Lake Storage Gen1 comes with an overhead that becomes
apparent when working with numerous small files. As a best practice, you must batch your data into larger files
versus writing thousands or millions of small files to Data Lake Storage Gen1. Avoiding small file sizes can
have multiple benefits, such as:
Lowering the authentication checks across multiple files
Reduced open file connections
Faster copying/replication
Fewer files to process when updating Data Lake Storage Gen1 POSIX permissions

Reference:
https://docs.microsoft.com/en-us/azure/data-lake-store/data-lake-store-best-practices

QUESTION 2
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You are designing an HDInsight/Hadoop cluster solution that uses Azure Data Lake Gen1 Storage.

The solution requires POSIX permissions and enables diagnostics logging for auditing.

62D227AA5C77F5C766AC37B5740F344D
You need to recommend solutions that optimize storage.

Proposed Solution: Implement compaction jobs to combine small files into larger files.

Does the solution meet the goal?

A. Yes
B. No

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Depending on what services and workloads are using the data, a good size to consider for files is 256 MB or
greater. If the file sizes cannot be batched when landing in Data Lake Storage Gen1, you can have a separate
compaction job that combines these files into larger ones.

Note: POSIX permissions and auditing in Data Lake Storage Gen1 comes with an overhead that becomes
apparent when working with numerous small files. As a best practice, you must batch your data into larger files
versus writing thousands or millions of small files to Data Lake Storage Gen1. Avoiding small file sizes can
have multiple benefits, such as:
Lowering the authentication checks across multiple files
Reduced open file connections
Faster copying/replication
Fewer files to process when updating Data Lake Storage Gen1 POSIX permissions

Reference:
https://docs.microsoft.com/en-us/azure/data-lake-store/data-lake-store-best-practices

QUESTION 3
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You are designing an HDInsight/Hadoop cluster solution that uses Azure Data Lake Gen1 Storage.

The solution requires POSIX permissions and enables diagnostics logging for auditing.

You need to recommend solutions that optimize storage.

Proposed Solution: Ensure that files stored are smaller than 250MB.

Does the solution meet the goal?

A. Yes
B. No

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:

62D227AA5C77F5C766AC37B5740F344D
Ensure that files stored are larger, not smaller than 250MB.
You can have a separate compaction job that combines these files into larger ones.

Note: The file POSIX permissions and auditing in Data Lake Storage Gen1 comes with an overhead that
becomes apparent when working with numerous small files. As a best practice, you must batch your data into
larger files versus writing thousands or millions of small files to Data Lake Storage Gen1. Avoiding small file
sizes can have multiple benefits, such as:
Lowering the authentication checks across multiple files
Reduced open file connections
Faster copying/replication
Fewer files to process when updating Data Lake Storage Gen1 POSIX permissions

Reference:
https://docs.microsoft.com/en-us/azure/data-lake-store/data-lake-store-best-practices

QUESTION 4
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You are designing an Azure SQL Database that will use elastic pools. You plan to store data about customers
in a table. Each record uses a value for CustomerID.

You need to recommend a strategy to partition data based on values in CustomerID.

Proposed Solution: Separate data into customer regions by using vertical partitioning.

Does the solution meet the goal?

A. Yes
B. No

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Vertical partitioning is used for cross-database queries. Instead we should use Horizontal Partitioning, which
also is called charding.

Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-elastic-query-overview

QUESTION 5
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You are designing an Azure SQL Database that will use elastic pools. You plan to store data about customers
in a table. Each record uses a value for CustomerID.

You need to recommend a strategy to partition data based on values in CustomerID.

62D227AA5C77F5C766AC37B5740F344D
Proposed Solution: Separate data into customer regions by using horizontal partitioning.

Does the solution meet the goal?

A. Yes
B. No

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
We should use Horizontal Partitioning through Sharding, not divide through regions.

Note: Horizontal Partitioning - Sharding: Data is partitioned horizontally to distribute rows across a scaled out
data tier. With this approach, the schema is identical on all participating databases. This approach is also
called “sharding”. Sharding can be performed and managed using (1) the elastic database tools libraries or (2)
self-sharding. An elastic query is used to query or compile reports across many shards.

Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-elastic-query-overview

QUESTION 6
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You are designing an Azure SQL Database that will use elastic pools. You plan to store data about customers
in a table. Each record uses a value for CustomerID.

You need to recommend a strategy to partition data based on values in CustomerID.

Proposed Solution: Separate data into shards by using horizontal partitioning.

Does the solution meet the goal?

A. Yes
B. No

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Horizontal Partitioning - Sharding: Data is partitioned horizontally to distribute rows across a scaled out data
tier. With this approach, the schema is identical on all participating databases. This approach is also called
“sharding”. Sharding can be performed and managed using (1) the elastic database tools libraries or (2) self-
sharding. An elastic query is used to query or compile reports across many shards.

Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-elastic-query-overview

62D227AA5C77F5C766AC37B5740F344D
QUESTION 7
HOTSPOT

You are designing a data processing solution that will run as a Spark job on an HDInsight cluster. The solution
will be used to provide near real-time information about online ordering for a retailer.

The solution must include a page on the company intranet that displays summary information.

The summary information page must meet the following requirements:

Display a summary of sales to date grouped by product categories, price range, and review scope.
Display sales summary information including total sales, sales as compared to one day ago and sales as
compared to one year ago.
Reflect information for new orders as quickly as possible.

You need to recommend a design for the solution.

What should you recommend? To answer, select the appropriate configuration in the answer area.

Hot Area:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Box 1: DataFrame
DataFrames
Best choice in most situations.
Provides query optimization through Catalyst.
Whole-stage code generation.
Direct memory access.
Low garbage collection (GC) overhead.
Not as developer-friendly as DataSets, as there are no compile-time checks or domain object programming.

Box 2: parquet
The best format for performance is parquet with snappy compression, which is the default in Spark 2.x.
Parquet stores data in columnar format, and is highly optimized in Spark.

Incorrect Answers:
DataSets
Good in complex ETL pipelines where the performance impact is acceptable.
Not good in aggregations where the performance impact can be considerable.

RDDs
You do not need to use RDDs, unless you need to build a new custom RDD.
No query optimization through Catalyst.
No whole-stage code generation.
High GC overhead.

Reference:
https://docs.microsoft.com/en-us/azure/hdinsight/spark/apache-spark-perf

QUESTION 8
You are evaluating data storage solutions to support a new application.

You need to recommend a data storage solution that represents data by using nodes and relationships in

62D227AA5C77F5C766AC37B5740F344D
graph structures.

Which data storage solution should you recommend?

A. Blob Storage
B. Azure Cosmos DB
C. Azure Data Lake Store
D. HDInsight

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
For large graphs with lots of entities and relationships, you can perform very complex analyses very quickly.
Many graph databases provide a query language that you can use to traverse a network of relationships
efficiently.

Relevant Azure service: Cosmos DB

Reference:
https://docs.microsoft.com/en-us/azure/architecture/guide/technology-choices/data-store-overview

QUESTION 9
HOTSPOT

You have an on-premises data warehouse that includes the following fact tables. Both tables have the following
columns: DataKey, ProductKey, RegionKey. There are 120 unique product keys and 65 unique region keys.

Queries that use the data warehouse take a long time to complete.

You plan to migrate the solution to use Azure Synapse Analytics. You need to ensure that the Azure-based
solution optimizes query performance and minimizes processing skew.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

Section: (none)
Explanation

Explanation/Reference:
Explanation:

Box 1: Hash-distributed

Box 2: ProductKey
ProductKey is used extensively in joins.
Hash-distributed tables improve query performance on large fact tables.

62D227AA5C77F5C766AC37B5740F344D
Box 3: Round-robin

Box 4: RegionKey
Round-robin tables are useful for improving loading speed.

Consider using the round-robin distribution for your table in the following scenarios:
When getting started as a simple starting point since it is the default
If there is no obvious joining key
If there is not good candidate column for hash distributing the table
If the table does not share a common join key with other tables
If the join is less significant than other joins in the query
When the table is a temporary staging table

Note: A distributed table appears as a single table, but the rows are actually stored across 60 distributions. The
rows are distributed with a hash or round-robin algorithm.

Reference:
https://docs.microsoft.com/en-us/azure/sql-data-warehouse/sql-data-warehouse-tables-distribute

QUESTION 10
You are designing a data processing solution that will implement the lambda architecture pattern. The solution
will use Spark running on HDInsight for data processing.

You need to recommend a data storage technology for the solution.

Which two technologies should you recommend? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A. Azure Cosmos DB
B. Azure Service Bus
C. Azure Storage Queue
D. Apache Cassandra
E. Kafka HDInsight

Correct Answer: AE
Section: (none)
Explanation

Explanation/Reference:
Explanation:

To implement a lambda architecture on Azure, you can combine the following technologies to accelerate real-
time big data analytics:
Azure Cosmos DB, the industry's first globally distributed, multi-model database service.
Apache Spark for Azure HDInsight, a processing framework that runs large-scale data analytics
applications
Azure Cosmos DB change feed, which streams new data to the batch layer for HDInsight to process
The Spark to Azure Cosmos DB Connector

E: You can use Apache Spark to stream data into or out of Apache Kafka on HDInsight using DStreams.

Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/lambda-architecture

QUESTION 11
A company manufactures automobile parts. The company installs IoT sensors on manufacturing machinery.

62D227AA5C77F5C766AC37B5740F344D
You must design a solution that analyzes data from the sensors.

You need to recommend a solution that meets the following requirements:

Data must be analyzed in real-time.


Data queries must be deployed using continuous integration.
Data must be visualized by using charts and graphs.
Data must be available for ETL operations in the future.
The solution must support high-volume data ingestion.

Which three actions should you recommend? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Use Azure Analysis Services to query the data. Output query results to Power BI.
B. Configure an Azure Event Hub to capture data to Azure Data Lake Storage.
C. Develop an Azure Stream Analytics application that queries the data and outputs to Power BI. Use Azure
Data Factory to deploy the Azure Stream Analytics application.
D. Develop an application that sends the IoT data to an Azure Event Hub.
E. Develop an Azure Stream Analytics application that queries the data and outputs to Power BI. Use Azure
Pipelines to deploy the Azure Stream Analytics application.
F. Develop an application that sends the IoT data to an Azure Data Lake Storage container.

Correct Answer: BCD


Section: (none)
Explanation

Explanation/Reference:

QUESTION 12
You are designing an Azure Databricks interactive cluster.

You need to ensure that the cluster meets the following requirements:

Enable auto-termination
Retain cluster configuration indefinitely after cluster termination.

What should you recommend?

A. Start the cluster after it is terminated.


B. Pin the cluster
C. Clone the cluster after it is terminated.
D. Terminate the cluster manually at process completion.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
To keep an interactive cluster configuration even after it has been terminated for more than 30 days, an
administrator can pin a cluster to the cluster list.

Reference:
https://docs.azuredatabricks.net/user-guide/clusters/terminate.html

62D227AA5C77F5C766AC37B5740F344D
QUESTION 13
You are designing a solution for a company. The solution will use model training for objective classification.

You need to design the solution.

What should you recommend?

A. an Azure Cognitive Services application


B. a Spark Streaming job
C. interactive Spark queries
D. Power BI models
E. a Spark application that uses Spark MLib.

Correct Answer: E
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Spark in SQL Server big data cluster enables AI and machine learning.
You can use Apache Spark MLlib to create a machine learning application to do simple predictive analysis on
an open dataset.

MLlib is a core Spark library that provides many utilities useful for machine learning tasks, including utilities that
are suitable for:
Classification
Regression
Clustering
Topic modeling
Singular value decomposition (SVD) and principal component analysis (PCA)
Hypothesis testing and calculating sample statistics

Reference:
https://docs.microsoft.com/en-us/azure/hdinsight/spark/apache-spark-machine-learning-mllib-ipython

QUESTION 14
A company stores data in multiple types of cloud-based databases.

You need to design a solution to consolidate data into a single relational database. Ingestion of data will occur
at set times each day.

What should you recommend?

A. SQL Server Migration Assistant


B. SQL Data Sync
C. Azure Data Factory
D. Azure Database Migration Service
E. Data Migration Assistant

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Incorrect Answers:
D: Azure Database Migration Service is used to migrate on-premises SQL Server databases to the cloud.

62D227AA5C77F5C766AC37B5740F344D
Reference:
https://docs.microsoft.com/en-us/azure/data-factory/introduction

https://azure.microsoft.com/en-us/blog/operationalize-azure-databricks-notebooks-using-data-factory/

https://azure.microsoft.com/en-us/blog/data-ingestion-into-azure-at-scale-made-easier-with-latest-
enhancements-to-adf-copy-data-tool/

QUESTION 15
HOTSPOT

You manage an on-premises server named Server1 that has a database named Database1. The company
purchases a new application that can access data from Azure SQL Database.

You recommend a solution to migrate Database1 to an Azure SQL Database instance.

What should you recommend? To answer, select the appropriate configuration in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Section: (none)
Explanation

62D227AA5C77F5C766AC37B5740F344D
Explanation/Reference:
References:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-import

QUESTION 16
You are designing an application. You plan to use Azure SQL Database to support the application.

The application will extract data from the Azure SQL Database and create text documents. The text documents
will be placed into a cloud-based storage solution. The text storage solution must be accessible from an SMB
network share.

You need to recommend a data storage solution for the text documents.

Which Azure data storage type should you recommend?

A. Queue
B. Files
C. Blob
D. Table

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Azure Files enables you to set up highly available network file shares that can be accessed by using the
standard Server Message Block (SMB) protocol.

Incorrect Answers:
A: The Azure Queue service is used to store and retrieve messages. It is generally used to store lists of
messages to be processed asynchronously.

C: Blob storage is optimized for storing massive amounts of unstructured data, such as text or binary data.
Blob storage can be accessed via HTTP or HTTPS but not via SMB.

D: Azure Table storage is used to store large amounts of structured data. Azure tables are ideal for storing
structured, non-relational data.

Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction

https://docs.microsoft.com/en-us/azure/storage/tables/table-storage-overview

QUESTION 17
You are designing an application that will have an Azure virtual machine. The virtual machine will access an
Azure SQL database. The database will not be accessible from the Internet.

You need to recommend a solution to provide the required level of access to the database.

What should you include in the recommendation?

A. Deploy an On-premises data gateway.


B. Add a virtual network to the Azure SQL server that hosts the database.
C. Add an application gateway to the virtual network that contains the Azure virtual machine.
D. Add a virtual network gateway to the virtual network that contains the Azure virtual machine.

62D227AA5C77F5C766AC37B5740F344D
Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
When you create an Azure virtual machine (VM), you must create a virtual network (VNet) or use an existing
VNet. You also need to decide how your VMs are intended to be accessed on the VNet.

Incorrect Answers:
C: Azure Application Gateway is a web traffic load balancer that enables you to manage traffic to your web
applications.

D: A VPN gateway is a specific type of virtual network gateway that is used to send encrypted traffic between
an Azure virtual network and an on-premises location over the public Internet.

Reference:
https://docs.microsoft.com/en-us/azure/virtual-machines/network-overview

QUESTION 18
HOTSPOT

You are designing an application that will store petabytes of medical imaging data

When the data is first created, the data will be accessed frequently during the first week. After one month, the
data must be accessible within 30 seconds, but files will be accessed infrequently. After one year, the data will
be accessed infrequently but must be accessible within five minutes.

You need to select a storage strategy for the data. The solution must minimize costs.

Which storage tier should you use for each time frame? To answer, select the appropriate options in the
answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

First week: Hot


Hot - Optimized for storing data that is accessed frequently.

After one month: Cool


Cool - Optimized for storing data that is infrequently accessed and stored for at least 30 days.

After one year: Cool

Incorrect Answers:
Archive: Optimized for storing data that is rarely accessed and stored for at least 180 days with flexible latency
requirements (on the order of hours).

References:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-blob-storage-tiers

QUESTION 19
You are designing a data store that will store organizational information for a company. The data will be used to
identify the relationships between users. The data will be stored in an Azure Cosmos DB database and will
contain several million objects.

You need to recommend which API to use for the database. The API must minimize the complexity to query
the user relationships. The solution must support fast traversals.

Which API should you recommend?

A. MongoDB
B. Table
C. Gremlin
D. Cassandra

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Gremlin features fast queries and traversals with the most widely adopted graph query standard.

Reference:
https://docs.microsoft.com/th-th/azure/cosmos-db/graph-introduction?view=azurermps-5.7.0

QUESTION 20
HOTSPOT

You are designing a new application that uses Azure Cosmos DB. The application will support a variety of data
patterns including log records and social media relationships.

You need to recommend which Cosmos DB API to use for each data pattern. The solution must minimize
resource utilization.

Which API should you recommend for each data pattern? To answer, select the appropriate options in the
answer area.

62D227AA5C77F5C766AC37B5740F344D
NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Section: (none)
Explanation

Explanation/Reference:
Explanation:

62D227AA5C77F5C766AC37B5740F344D
Log records: SQL

Social media mentions: Gremlin


You can store the actual graph of followers using Azure Cosmos DB Gremlin API to create vertexes for each
user and edges that maintain the "A-follows-B" relationships. With the Gremlin API, you can get the followers of
a certain user and create more complex queries to suggest people in common. If you add to the graph the
Content Categories that people like or enjoy, you can start weaving experiences that include smart content
discovery, suggesting content that those people you follow like, or finding people that you might have much in
common with.

Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/social-media-apps

QUESTION 21
You need to recommend a storage solution to store flat files and columnar optimized files. The solution must
meet the following requirements:

Store standardized data that data scientists will explore in a curated folder.
Ensure that applications cannot access the curated folder.
Store staged data for import to applications in a raw folder.
Provide data scientists with access to specific folders in the raw folder and all the content the curated folder.

Which storage solution should you recommend?

A. Azure Synapse Analytics


B. Azure Blob storage
C. Azure Data Lake Storage Gen2
D. Azure SQL Database

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Azure Blob Storage containers is a general purpose object store for a wide variety of storage scenarios. Blobs
are stored in containers, which are similar to folders.

Incorrect Answers:
C: Azure Data Lake Storage is an optimized storage for big data analytics workloads.

Reference:
https://docs.microsoft.com/en-us/azure/architecture/data-guide/technology-choices/data-storage

QUESTION 22
Your company is an online retailer that can have more than 100 million orders during a 24-hour period, 95
percent of which are placed between 16:30 and 17:00. All the orders are in US dollars. The current product line
contains the following three item categories:

Games with 15,123 items


Books with 35,312 items
Pens with 6,234 items

You are designing an Azure Cosmos DB data solution for a collection named Orders Collection. The following
documents is a typical order in Orders Collection.

62D227AA5C77F5C766AC37B5740F344D
Orders Collection is expected to have a balanced read/write-intensive workload.

Which partition key provides the most efficient throughput?

A. Item/Category
B. OrderTime
C. Item/Currency
D. Item/id

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Choose a partition key that has a wide range of values and access patterns that are evenly spread across
logical partitions. This helps spread the data and the activity in your container across the set of logical
partitions, so that resources for data storage and throughput can be distributed across the logical partitions.

Choose a partition key that spreads the workload evenly across all partitions and evenly over time. Your choice
of partition key should balance the need for efficient partition queries and transactions against the goal of
distributing items across multiple partitions to achieve scalability.

Candidates for partition keys might include properties that appear frequently as a filter in your queries. Queries
can be efficiently routed by including the partition key in the filter predicate.

Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/partitioning-overview#choose-partitionkey

QUESTION 23
You have a MongoDB database that you plan to migrate to an Azure Cosmos DB account that uses the
MongoDB API.

During testing, you discover that the migration takes longer than expected.

You need to recommend a solution that will reduce the amount of time it takes to migrate the data.

What are two possible recommendations to achieve this goal? Each correct answer presents a complete
solution.

NOTE: Each correct selection is worth one point.

A. Increase the Request Units (RUs).

62D227AA5C77F5C766AC37B5740F344D
B. Turn off indexing.
C. Add a write region.
D. Create unique indexes.
E. Create compound indexes.

Correct Answer: AB
Section: (none)
Explanation

Explanation/Reference:
Explanation:
A: Increase the throughput during the migration by increasing the Request Units (RUs).

For customers that are migrating many collections within a database, it is strongly recommend to configure
database-level throughput. You must make this choice when you create the database. The minimum database-
level throughput capacity is 400 RU/sec. Each collection sharing database-level throughput requires at least
100 RU/sec.

B: By default, Azure Cosmos DB indexes all your data fields upon ingestion. You can modify the indexing policy
in Azure Cosmos DB at any time. In fact, it is often recommended to turn off indexing when migrating data, and
then turn it back on when the data is already in Cosmos DB.

Reference:
https://docs.microsoft.com/bs-latn-ba/Azure/cosmos-db/mongodb-pre-migration

QUESTION 24
You need to recommend a storage solution for a sales system that will receive thousands of small files per
minute. The files will be in JSON, text, and CSV formats. The files will be processed and transformed before
they are loaded into a data warehouse in Azure Synapse Analytics. The files must be stored and secured in
folders.

Which storage solution should you recommend?

A. Azure Data Lake Storage Gen2


B. Azure Cosmos DB
C. Azure SQL Database
D. Azure Blob storage

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Azure provides several solutions for working with CSV and JSON files, depending on your needs. The primary
landing place for these files is either Azure Storage or Azure Data Lake Store.1

Azure Data Lake Storage is an optimized storage for big data analytics workloads.

Incorrect Answers:
D: Azure Blob Storage containers is a general purpose object store for a wide variety of storage scenarios.
Blobs are stored in containers, which are similar to folders.

Reference:
https://docs.microsoft.com/en-us/azure/architecture/data-guide/scenarios/csv-and-json

QUESTION 25
You are designing an Azure Cosmos DB database that will support vertices and edges.

62D227AA5C77F5C766AC37B5740F344D
Which Cosmos DB API should you include in the design?

A. SQL
B. Cassandra
C. Gremlin
D. Table

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
The Azure Cosmos DB Gremlin API can be used to store massive graphs with billions of vertices and edges.

Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/graph-introduction

QUESTION 26
You are designing a big data storage solution. The solution must meet the following requirements:

Provide unlimited account sizes.


Support a hierarchical file system.
Be optimized for parallel analytics workloads.

Which storage solution should you use?

A. Azure Data Lake Storage Gen2


B. Azure Blob storage
C. Apache HBase in Azure HDInsight
D. Azure Cosmos DB

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Azure Data Lake Storage is optimized performance for parallel analytics workloads

A key mechanism that allows Azure Data Lake Storage Gen2 to provide file system performance at object
storage scale and prices is the addition of a hierarchical namespace. This allows the collection of objects/files
within an account to be organized into a hierarchy of directories and nested subdirectories in the same way that
the file system on your computer is organized.

Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-namespace

QUESTION 27
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

62D227AA5C77F5C766AC37B5740F344D
You plan to store delimited text files in an Azure Data Lake Storage account that will be organized into
department folders.

You need to configure data access so that users see only the files in their respective department folder.

Solution: From the storage account, you enable a hierarchical namespace, and you use RBAC.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Disable the hierarchical namespace. And instead of RBAC use access control lists (ACLs).

Note: Azure Data Lake Storage implements an access control model that derives from HDFS, which in turn
derives from the POSIX access control model.

Blob container ACLs does not support the hierarchical namespace, so it must be disabled.

Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-known-issues

https://docs.microsoft.com/en-us/azure/data-lake-store/data-lake-store-access-control

QUESTION 28
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You plan to store delimited text files in an Azure Data Lake Storage account that will be organized into
department folders.

You need to configure data access so that users see only the files in their respective department folder.

Solution: From the storage account, you disable a hierarchical namespace, and you use RBAC (role-based
access control).

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Instead of RBAC use access control lists (ACLs).

62D227AA5C77F5C766AC37B5740F344D
Note: Azure Data Lake Storage implements an access control model that derives from HDFS, which in turn
derives from the POSIX access control model.

Blob container ACLs does not support the hierarchical namespace, so it must be disabled.

Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-known-issues

https://docs.microsoft.com/en-us/azure/data-lake-store/data-lake-store-access-control

QUESTION 29
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You plan to store delimited text files in an Azure Data Lake Storage account that will be organized into
department folders.

You need to configure data access so that users see only the files in their respective department folder.

Solution: From the storage account, you disable a hierarchical namespace, and you use access control lists
(ACLs).

Does this meet the goal?

A. Yes
B. No

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Azure Data Lake Storage implements an access control model that derives from HDFS, which in turn derives
from the POSIX access control model.

Blob container ACLs does not support the hierarchical namespace, so it must be disabled.

Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-known-issues

https://docs.microsoft.com/en-us/azure/data-lake-store/data-lake-store-access-control

QUESTION 30
You plan to store 100 GB of data used by a line-of-business (LOB) app.

You need to recommend a data storage solution for the data. The solution must meet the following
requirements:

Minimize storage costs.


Natively support relational queries.
Provide a recovery time objective (RTO) of less than one minute.

What should you include in the recommendation?

62D227AA5C77F5C766AC37B5740F344D
A. Azure Cosmos DB
B. Azure SQL Database
C. Azure Synapse Analytics
D. Azure Blob storage

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Incorrect Answers:
A: Azure Cosmos DB would require an SQL API.

QUESTION 31
HOTSPOT

You have a data model that you plan to implement in a data warehouse in Azure Synapse Analytics as shown
in the following exhibit.

All the dimension tables will be less than 2 GB after compression, and the fact table will be approximately 6 TB.

Which type of table should you use for each table? To answer, select the appropriate options in the answer
area.

NOTE: Each correct selection is worth one point.

Hot Area:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Box 1: Replicated
Replicated tables are ideal for small star-schema dimension tables, because the fact table is often distributed
on a column that is not compatible with the connected dimension tables. If this case applies to your schema,
consider changing small dimension tables currently implemented as round-robin to replicated.

Box 2: Replicated

Box 3: Replicated

Box 4: Hash-distributed
For Fact tables use hash-distribution with clustered columnstore index. Performance improves when two hash
tables are joined on the same distribution column.

Reference:
https://azure.microsoft.com/en-us/updates/reduce-data-movement-and-make-your-queries-more-efficient-with-
the-general-availability-of-replicated-tables/

https://azure.microsoft.com/en-us/blog/replicated-tables-now-generally-available-in-azure-sql-data-warehouse/

62D227AA5C77F5C766AC37B5740F344D
QUESTION 32
You are designing a data storage solution for a database that is expected to grow to 50 TB. The usage pattern
is singleton inserts, singleton updates, and reporting.

Which storage solution should you use?

A. Azure SQL Database elastic pools


B. Azure Synapse Analytics
C. Azure Cosmos DB that uses the Gremlin API
D. Azure SQL Database Hyperscale

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Explanation:
A Hyperscale database is an Azure SQL database in the Hyperscale service tier that is backed by the
Hyperscale scale-out storage technology. A Hyperscale database supports up to 100 TB of data and provides
high throughput and performance, as well as rapid scaling to adapt to the workload requirements. Scaling is
transparent to the application – connectivity, query processing, etc. work like any other Azure SQL database.

Incorrect Answers:
A: SQL Database elastic pools are a simple, cost-effective solution for managing and scaling multiple
databases that have varying and unpredictable usage demands. The databases in an elastic pool are on a
single Azure SQL Database server and share a set number of resources at a set price. Elastic pools in Azure
SQL Database enable SaaS developers to optimize the price performance for a group of databases within a
prescribed budget while delivering performance elasticity for each database.

B: Rather than SQL Data Warehouse, consider other options for operational (OLTP) workloads that have large
numbers of singleton selects.

Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-service-tier-hyperscale-faq

QUESTION 33
HOTSPOT

You are designing a solution that will use Azure Table storage. The solution will log records in the following
entity.

You are evaluating which partition key to use based on the following two scenarios:

Scenario1: Minimize hotspots under heavy write workloads.


Scenario2: Ensure that date lookups are as efficient as possible for read workloads.

Which partition key should you use for each scenario? To answer, select the appropriate options in the answer

62D227AA5C77F5C766AC37B5740F344D
area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Section: (none)

62D227AA5C77F5C766AC37B5740F344D
Explanation

Explanation/Reference:
References:
https://docs.microsoft.com/en-us/rest/api/storageservices/designing-a-scalable-partitioning-strategy-for-azure-
table-storage

QUESTION 34
DRAG DROP

You have data on the 75,000 employees of your company. The data contains the properties shown in the
following table.

You need to store the employee data in an Azure Cosmos DB container. Most queries on the data will filter by
the Current Department and the Employee Surname properties.

Which partition key and item ID should you use for the container? To answer, select the appropriate options in
the answer area.

NOTE: Each correct selection is worth one point.

Select and Place:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Partition key: Current Department

Item ID: Employee ID

Reference:
https://docs.microsoft.com/en-us/rest/api/storageservices/designing-a-scalable-partitioning-strategy-for-azure-
table-storage

QUESTION 35
DRAG DROP

You need to design a data architecture to bring together all your data at any scale and provide insights into all
your users through the use of analytical dashboards, operational reports, and advanced analytics.

How should you complete the architecture? To answer, drag the appropriate Azure services to the correct
locations in the architecture. Each service may be used once, more than once, or not at all. You may need to
drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Ingest: Azure Data Factory

Store: Azure Blob storage

Model & Serve: Azure Synapse Analytics


Load data into Azure Synapse Analytics.

Prep & Train: Azure Databricks.


Extract data from Azure Blob storage.

Reference:
https://docs.microsoft.com/en-us/azure/azure-databricks/databricks-extract-load-sql-data-warehouse

QUESTION 36
HOTSPOT

You are designing an enterprise data warehouse in Azure Synapse Analytics that will store website traffic
analytic in a star schema.

You plan to have a fact table for website visits. The table will be approximately 5 GB.

You need to recommend which distribution type and index type to use for the table. The solution must provide
the fastest query performance.

What should you recommend? To answer, select the appropriate options in the answer area

NOTE: Each correct selection is worth one point.

Hot Area:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

Section: (none)
Explanation

62D227AA5C77F5C766AC37B5740F344D
Explanation/Reference:
Reference:
https://docs.microsoft.com/en-us/azure/sql-data-warehouse/sql-data-warehouse-tables-distribute

https://docs.microsoft.com/en-us/azure/sql-data-warehouse/sql-data-warehouse-tables-index

QUESTION 37
You plan to deploy a reporting database to Azure. The database will contain 30 GB of data. The amount of data
will increase by 300 MB each year.

Rarely will the database be accessed during the second and third weeks of each month. During the first and
fourth week of each month, new data will be loaded each night.

You need to recommend a solution for the planned database. The solution must meet the following
requirements:

Minimize costs.
Minimize administrative effort.

What should you recommend?

A. an Azure HDInsight cluster


B. Azure SQL Database Hyperscale
C. Azure SQL Database Business Critical
D. Azure SQL Database serverless

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Serverless is a compute tier for single Azure SQL Databases that automatically scales compute based on
workload demand and bills for the amount of compute used per second. The serverless compute tier also
automatically pauses databases during inactive periods when only storage is billed and automatically resumes
databases when activity returns.

Incorrect Answers:
A: Azure HDInsight is a managed Apache Hadoop service that lets you run Apache Spark, Apache Hive,
Apache Kafka, Apache HBase, and more in the cloud.

B, C: Azure SQL Database Hyperscale and Azure SQL Database Business Critical are based on SQL Server
database engine architecture that is adjusted for the cloud environment in order to ensure 99.99% availability
even in the cases of infrastructure failures.

Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/database/serverless-tier-overview

https://docs.microsoft.com/en-us/azure/hdinsight/

https://docs.microsoft.com/en-us/azure/azure-sql/database/service-tier-hyperscale

QUESTION 38
You are designing a solution for the ad hoc analysis of data in Azure Databricks notebooks. The data will be
stored in Azure Blob storage.

You need to ensure that Blob storage will support the recovery of the data if the data is overwritten
accidentally.

62D227AA5C77F5C766AC37B5740F344D
What should you recommend?

A. Enable soft delete.


B. Add a resource lock.
C. Enable diagnostics logging.
D. Use read-access geo-redundant storage (RA-GRS).

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Soft delete protects blob data from being accidentally or erroneously modified or deleted. When soft delete is
enabled for a storage account, blobs, blob versions (preview), and snapshots in that storage account may be
recovered after they are deleted, within a retention period that you specify.

Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/soft-delete-overview

62D227AA5C77F5C766AC37B5740F344D
Design data processing solutions

Testlet 1

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Background

Trey Research is a technology innovator. The company partners with regional transportation department office
to build solutions that improve traffic flow and safety.

The company is developing the following solutions:

Regional transportation departments installed traffic sensor systems on major highways across North America.
Sensors record the following information each time a vehicle passes in front of a sensor:

62D227AA5C77F5C766AC37B5740F344D
Time
Location in latitude and longitude
Speed in kilometers per second (kmps)
License plate number
Length of vehicle in meters

Sensors provide data by using the following structure:

Traffic sensors will occasionally capture an image of a vehicle for debugging purposes.
You must optimize performance of saving/storing vehicle images.

Traffic sensor data

Sensors must have permission only to add items to the SensorData collection.
Traffic data insertion rate must be maximized.
Once every three months all traffic sensor data must be analyzed to look for data patterns that indicate
sensor malfunctions.
Sensor data must be stored in a Cosmos DB named treydata in a collection named SensorData
The impact of vehicle images on sensor data throughout must be minimized.

Backtrack

This solution reports on all data related to a specific vehicle license plate. The report must use data from the
SensorData collection. Users must be able to filter vehicle data in the following ways:

vehicles on a specific road


vehicles driving above the speed limit

Planning Assistance

Data used for Planning Assistance must be stored in a sharded Azure SQL Database.

Data from the Sensor Data collection will automatically be loaded into the Planning Assistance database once
a week by using Azure Data Factory. You must be able to manually trigger the data load process.

Privacy and security policy

Azure Active Directory must be used for all services where it is available.
For privacy reasons, license plate number information must not be accessible in Planning Assistance.

62D227AA5C77F5C766AC37B5740F344D
Unauthorized usage of the Planning Assistance data must be detected as quickly as possible. Unauthorized
usage is determined by looking for an unusual pattern of usage.
Data must only be stored for seven years.

Performance and availability

The report for Backtrack must execute as quickly as possible.


The SLA for Planning Assistance is 70 percent, and multiday outages are permitted.
All data must be replicated to multiple geographic regions to prevent data loss.
You must maximize the performance of the Real Time Response system.

Financial requirements

Azure resource costs must be minimized where possible.

QUESTION 1
HOTSPOT

You need to design the data loading pipeline for Planning Assistance.

What should you recommend? To answer, drag the appropriate technologies to the correct locations. Each
technology may be used once, more than once, or not at all. You may need to drag the split bar between panes
or scroll to view content.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Section: (none)
Explanation

62D227AA5C77F5C766AC37B5740F344D
Explanation/Reference:
Explanation:

Box 1: SqlSink Table


Sensor data must be stored in a Cosmos DB named treydata in a collection named SensorData

Box 2: Cosmos Bulk Loading


Use Copy Activity in Azure Data Factory to copy data from and to Azure Cosmos DB (SQL API).

Scenario: Data from the Sensor Data collection will automatically be loaded into the Planning Assistance
database once a week by using Azure Data Factory. You must be able to manually trigger the data load
process.
Data used for Planning Assistance must be stored in a sharded Azure SQL Database.

Reference:
https://docs.microsoft.com/en-us/azure/data-factory/connector-azure-cosmos-db

QUESTION 2
You need to design the runtime environment for the Real Time Response system.

What should you recommend?

A. General Purpose nodes without the Enterprise Security package


B. Memory Optimized Nodes without the Enterprise Security package
C. Memory Optimized nodes with the Enterprise Security package
D. General Purpose nodes with the Enterprise Security package

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Scenario: You must maximize the performance of the Real Time Response system.

QUESTION 3
HOTSPOT

You need to ensure that emergency road response vehicles are dispatched automatically.

How should you design the processing system? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

Section: (none)
Explanation

Explanation/Reference:
Explanation:

Box1: API App

1. Events generated from the IoT data sources are sent to the stream ingestion layer through Azure HDInsight
Kafka as a stream of messages. HDInsight Kafka stores streams of data in topics for a configurable of
time.
2. Kafka consumer, Azure Databricks, picks up the message in real time from the Kafka topic, to process the
data based on the business logic and can then send to Serving layer for storage.
3. Downstream storage services, like Azure Cosmos DB, Azure Synapse Analytics, or Azure SQL DB, will
then be a data source for presentation and action layer.
4. Business analysts can use Microsoft Power BI to analyze warehoused data. Other applications can be built

62D227AA5C77F5C766AC37B5740F344D
upon the serving layer as well. For example, we can expose APIs based on the service layer data for third
party uses.

Box 2: Cosmos DB Change Feed


Change feed support in Azure Cosmos DB works by listening to an Azure Cosmos DB container for any
changes. It then outputs the sorted list of documents that were changed in the order in which they were
modified.
The change feed in Azure Cosmos DB enables you to build efficient and scalable solutions for each of these
patterns, as shown in the following image:

Reference:
https://docs.microsoft.com/bs-cyrl-ba/azure/architecture/example-scenario/data/realtime-analytics-vehicle-iot?
view=azurermps-4.4.1

QUESTION 4
DRAG DROP

You need to ensure that performance requirements for Backtrack reports are met.

What should you recommend? To answer, drag the appropriate technologies to the correct locations. Each
technology may be used once, more than once, or not at all. You may need to drag the split bar between panes
or scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

Section: (none)
Explanation

Explanation/Reference:
Explanation:

Box 1: Cosmos DB indexes


The report for Backtrack must execute as quickly as possible.
You can override the default indexing policy on an Azure Cosmos container, this could be useful if you want to
tune the indexing precision to improve the query performance or to reduce the consumed storage.

Box 2: Cosmos DB TTL


This solution reports on all data related to a specific vehicle license plate. The report must use data from the
SensorData collection. Users must be able to filter vehicle data in the following ways:
vehicles on a specific road
vehicles driving above the speed limit

Note: With Time to Live or TTL, Azure Cosmos DB provides the ability to delete items automatically from a
container after a certain time period. By default, you can set time to live at the container level and override the
value on a per-item basis. After you set the TTL at a container or at an item level, Azure Cosmos DB will
automatically remove these items after the time period, since the time they were last modified.

Incorrect Answers:
Cosmos DB stored procedures: Stored procedures are best suited for operations that are write heavy. When
deciding where to use stored procedures, optimize around encapsulating the maximum amount of writes
possible. Generally speaking, stored procedures are not the most efficient means for doing large numbers of
read operations so using stored procedures to batch large numbers of reads to return to the client will not yield
the desired benefit.

62D227AA5C77F5C766AC37B5740F344D
Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/index-policy

https://docs.microsoft.com/en-us/azure/cosmos-db/time-to-live

62D227AA5C77F5C766AC37B5740F344D
Design data processing solutions

Testlet 2

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Overview

You develop data engineering solutions for Graphics Design Institute, a global media company with offices in
New York City, Manchester, Singapore, and Melbourne.

The New York office hosts SQL Server databases that stores massive amounts of customer data. The
company also stores millions of images on a physical server located in the New York office. More than 2 TB of
image data is added each day. The images are transferred from customer devices to the server in New York.

Many images have been placed on this server in an unorganized manner, making it difficult for editors to
search images. Images should automatically have object and color tags generated. The tags must be stored in
a document database, and be queried by SQL.

You are hired to design a solution that can store, transform, and visualize customer data.

Requirements

Business

The company identifies the following business requirements:

You must transfer all images and customer data to cloud storage and remove on-premises servers.
You must develop an analytical processing solution for transforming customer data.
You must develop an image object and color tagging solution.
Capital expenditures must be minimized.
Cloud resource costs must be minimized.

Technical

The solution has the following technical requirements:

Tagging data must be uploaded to the cloud from the New York office location.

62D227AA5C77F5C766AC37B5740F344D
Tagging data must be replicated to regions that are geographically close to company office locations.
Image data must be stored in a single data store at minimum cost.
Customer data must be analyzed using managed Spark clusters.
Power BI must be used to visualize transformed customer data.
All data must be backed up in case disaster recovery is required.

Security and optimization

All cloud data must be encrypted at rest and in transit. The solution must support:

parallel processing of customer data


hyper-scale storage of images
global region data replication of processed image data

QUESTION 1
DRAG DROP

You need to design the image processing solution to meet the optimization requirements for image tag data.

What should you configure? To answer, drag the appropriate setting to the correct drop targets.
Each source may be used once, more than once, or not at all. You may need to drag the split bar between
panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Tagging data must be uploaded to the cloud from the New York office location.
Tagging data must be replicated to regions that are geographically close to company office locations.

QUESTION 2
HOTSPOT

You need to design the image processing and storage solutions.

What should you recommend? To answer, select the appropriate configuration in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

Section: (none)
Explanation

Explanation/Reference:
Explanation:

From the scenario:


The company identifies the following business requirements:
You must transfer all images and customer data to cloud storage and remove on-premises servers.
You must develop an image object and color tagging solution.

The solution has the following technical requirements:


Image data must be stored in a single data store at minimum cost.
All data must be backed up in case disaster recovery is required.

All cloud data must be encrypted at rest and in transit. The solution must support:
hyper-scale storage of images

62D227AA5C77F5C766AC37B5740F344D
Reference:
https://docs.microsoft.com/en-us/azure/architecture/data-guide/technology-choices/batch-processing

https://docs.microsoft.com/en-us/azure/sql-database/sql-database-service-tier-hyperscale

62D227AA5C77F5C766AC37B5740F344D
Design data processing solutions

Testlet 3

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Background

Current environment

The company has the following virtual machines (VMs):

Requirements

Storage and processing

You must be able to use a file system view of data stored in a blob.
You must build an architecture that will allow Contoso to use the DB FS filesystem layer over a blob store. The
architecture will need to support data files, libraries, and images. Additionally, it must provide a web-based
interface to documents that contain runnable command, visualizations, and narrative text such as a notebook.

CONT_SQL3 requires an initial scale of 35000 IOPS.


CONT_SQL1 and CONT_SQL2 must use the vCore model and should include replicas. The solution must
support 8000 IOPS.
The storage should be configured to optimized storage for database OLTP workloads.

62D227AA5C77F5C766AC37B5740F344D
Migration

You must be able to independently scale compute and storage resources.


You must migrate all SQL Server workloads to Azure. You must identify related machines in the on-
premises environment, get disk size data usage information.
Data from SQL Server must include zone redundant storage.
You need to ensure that app components can reside on-premises while interacting with components that
run in the Azure public cloud.
SAP data must remain on-premises.
The Azure Site Recovery (ASR) results should contain per-machine data.

Business requirements

You must design a regional disaster recovery topology.


The database backups have regulatory purposes and must be retained for seven years.
CONT_SQL1 stores customers sales data that requires ETL operations for data analysis. A solution is
required that reads data from SQL, performs ETL, and outputs to Power BI. The solution should use
managed clusters to minimize costs. To optimize logistics, Contoso needs to analyze customer sales data
to see if certain products are tied to specific times in the year.
The analytics solution for customer sales data must be available during a regional outage.

Security and auditing

Contoso requires all corporate computers to enable Windows Firewall.


Azure servers should be able to ping other Contoso Azure servers.
Employee PII must be encrypted in memory, in motion, and at rest. Any data encrypted by SQL Server must
support equality searches, grouping, indexing, and joining on the encrypted data.
Keys must be secured by using hardware security modules (HSMs).
CONT_SQL3 must not communicate over the default ports

Cost

All solutions must minimize cost and resources.


The organization does not want any unexpected charges.
The data engineers must set the SQL Data Warehouse compute resources to consume 300 DWUs.
CONT_SQL2 is not fully utilized during non-peak hours. You must minimize resource costs for during non-
peak hours.

QUESTION 1
You need to optimize storage for CONT_SQL3.

What should you recommend?

A. AlwaysOn
B. Transactional processing
C. General
D. Data warehousing

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
CONT_SQL3 with the SQL Server role, 100 GB database size, Hyper-VM to be migrated to Azure VM.
The storage should be configured to optimized storage for database OLTP workloads.

Azure SQL Database provides three basic in-memory based capabilities (built into the underlying database

62D227AA5C77F5C766AC37B5740F344D
engine) that can contribute in a meaningful way to performance improvements:

In-Memory Online Transactional Processing (OLTP)


Clustered columnstore indexes intended primarily for Online Analytical Processing (OLAP) workloads
Nonclustered columnstore indexes geared towards Hybrid Transactional/Analytical Processing (HTAP)
workloads

Reference:
https://www.databasejournal.com/features/mssql/overview-of-in-memory-technologies-of-azure-sql-
database.html

62D227AA5C77F5C766AC37B5740F344D
Design data processing solutions

Testlet 4

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Overview

General Overview

ADatum Corporation is a medical company that has 5,000 physicians located in more than 300 hospitals
across the US. The company has a medical department, a sales department, a marketing department, a
medical research department, and a human resources department.

You are redesigning the application environment of ADatum.

Physical Locations

ADatum has three main offices in New York, Dallas, and Los Angeles. The offices connect to each other by
using a WAN link. Each office connects directly to the Internet. The Los Angeles office also has a datacenter
that hosts all the company's applications.

Existing Environment

Health Review

ADatum has a critical OLTP web application named Health Review that physicians use to track billing, patient
care, and overall physician best practices.

Health Interface

ADatum has a critical application named Health Interface that receives hospital messages related to patient
care and status updates. The messages are sent in batches by each hospital's enterprise relationship
management (ERM) system by using a VPN. The data sent from each hospital can have varying columns and
formats.

Currently, a custom C# application is used to send the data to Health Interface. The application uses
deprecated libraries and a new solution must be designed for this functionality.

62D227AA5C77F5C766AC37B5740F344D
Health Insights

ADatum has a web-based reporting system named Health Insights that shows hospital and patient insights to
physicians and business users. The data is created from the data in Health Review and Health Interface, as
well as manual entries.

Database Platform

Currently, the databases for all three applications are hosted on an out-of-date VMware cluster that has a
single instance of Microsoft SQL Server 2012.

Problem Statements

ADatum identifies the following issues in its current environment:

Over time, the data received by Health Interface from the hospitals has slowed, and the number of
messages has increased.
When a new hospital joins ADatum, Health Interface requires a schema modification due to the lack of data
standardization.
The speed of batch data processing is inconsistent.

Business Requirements

Business Goals

ADatum identifies the following business goals:

Migrate the applications to Azure whenever possible.


Minimize the development effort required to perform data movement.
Provide continuous integration and deployment for development, test, and production environments.
Provide faster access to the applications and the data and provide more consistent application
performance.
Minimize the number of services required to perform data processing, development, scheduling, monitoring,
and the operationalizing of pipelines.

Health Review Requirements

ADatum identifies the following requirements for the Health Review application:

Ensure that sensitive health data is encrypted at rest and in transit.


Tag all the sensitive health data in Health Review. The data will be used for auditing.

Health Interface Requirements

ADatum identifies the following requirements for the Health Interface application:

Upgrade to a data storage solution that will provide flexible schemas and increased throughput for writing
data. Data must be regionally located close to each hospital, and reads must display be the most recent
committed version of an item.
Reduce the amount of time it takes to add data from new hospitals to Health Interface.
Support a more scalable batch processing solution in Azure.
Reduce the amount of development effort to rewrite existing SQL queries.

Health Insights Requirements

ADatum identifies the following requirements for the Health Insights application:

The analysis of events must be performed over time by using an organizational date dimension table.
The data from Health Interface and Health Review must be available in Health Insights within 15 minutes of

62D227AA5C77F5C766AC37B5740F344D
being committed.
The new Health Insights application must be built on a massively parallel processing (MPP) architecture
that will support the high performance of joins on large fact tables.

QUESTION 1
What should you recommend as a batch processing solution for Health Interface?

A. Azure CycleCloud
B. Azure Stream Analytics
C. Azure Data Factory
D. Azure Databricks

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Scenario: ADatum identifies the following requirements for the Health Interface application:
Support a more scalable batch processing solution in Azure.
Reduce the amount of time it takes to add data from new hospitals to Health Interface.

Data Factory integrates with the Azure Cosmos DB bulk executor library to provide the best performance when
you write to Azure Cosmos DB.

Reference:
https://docs.microsoft.com/en-us/azure/data-factory/connector-azure-cosmos-db

62D227AA5C77F5C766AC37B5740F344D
Design data processing solutions

Testlet 5

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you
would like to complete each case. However, there may be additional case studies and sections on this
exam. You must manage your time to ensure that you are able to complete all questions included on this exam
in the time provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Overview

You are a data engineer for Trey Research. The company is close to completing a joint project with the
government to build smart highways infrastructure across North America. This involves the placement of
sensors and cameras to measure traffic flow, car speed, and vehicle details.

You have been asked to design a cloud solution that will meet the business and technical requirements of the
smart highway.

Solution components

Telemetry Capture

The telemetry capture system records each time a vehicle passes in front of a sensor. The sensors run on a
custom embedded operating system and record the following telemetry data:

Time
Location in latitude and longitude
Speed in kilometers per hour (kmph)
Length of vehicle in meters

Visual Monitoring

The visual monitoring system is a network of approximately 1,000 cameras placed near highways that capture
images of vehicle traffic every 2 seconds. The cameras record high resolution images. Each image is
approximately 3 MB in size.

Requirements. Business

The company identifies the following business requirements:

External vendors must be able to perform custom analysis of data using machine learning technologies.

62D227AA5C77F5C766AC37B5740F344D
You must display a dashboard on the operations status page that displays the following metrics: telemetry,
volume, and processing latency.
Traffic data must be made available to the Government Planning Department for the purpose of modeling
changes to the highway system. The traffic data will be used in conjunction with other data such as
information about events such as sporting events, weather conditions, and population statistics. External
data used during the modeling is stored in on-premises SQL Server 2016 databases and CSV files stored
in an Azure Data Lake Storage Gen2 storage account.
Information about vehicles that have been detected as going over the speed limit during the last 30 minutes
must be available to law enforcement officers. Several law enforcement organizations may respond to
speeding vehicles.
The solution must allow for searches of vehicle images by license plate to support law enforcement
investigations. Searches must be able to be performed using a query language and must support fuzzy
searches to compensate for license plate detection errors.

Requirements. Security

The solution must meet the following security requirements:

External vendors must not have direct access to sensor data or images.
Images produced by the vehicle monitoring solution must be deleted after one month. You must minimize
costs associated with deleting images from the data store.
Unauthorized usage of data must be detected in real time. Unauthorized usage is determined by looking for
unusual usage patterns.
All changes to Azure resources used by the solution must be recorded and stored. Data must be provided
to the security team for incident response purposes.

Requirements. Sensor data

You must write all telemetry data to the closest Azure region. The sensors used for the telemetry capture
system have a small amount of memory available and so must write data as quickly as possible to avoid losing
telemetry data.

QUESTION 1
DRAG DROP

You need to design the system for notifying law enforcement officers about speeding vehicles.

How should you design the pipeline? To answer, drag the appropriate services to the correct locations. Each
service may be used once, more than once, or not at all. You may need to drag the split bar between panes or
scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Scenario:
Information about vehicles that have been detected as going over the speed limit during the last 30 minutes
must be available to law enforcement officers. Several law enforcement organizations may respond to
speeding vehicles.

Telemetry Capture
The telemetry capture system records each time a vehicle passes in front of a sensor. The sensors run on a
custom embedded operating system and record the following telemetry data:
Time
Location in latitude and longitude
Speed in kilometers per hour (kmph)
Length of vehicle in meters

Reference:
https://docs.microsoft.com/en-us/azure/azure-databricks/what-is-azure-databricks

62D227AA5C77F5C766AC37B5740F344D
Design data processing solutions

Testlet 6

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Overview

Litware, Inc. owns and operates 300 convenience stores across the US. The company sells a variety of
packaged foods and drinks, as well as a variety of prepared foods, such as sandwiches and pizzas.

Litware has a loyalty club whereby members can get daily discounts on specific items by providing their
membership number at checkout.

Litware employs business analysts who prefer to analyze data by using Microsoft Power BI, and data scientists
who prefer analyzing data in Azure Databricks notebooks.

Requirements. Business Goals

Litware wants to create a new analytics environment in Azure to meet the following requirements:

See inventory levels across the stores. Data must be updated as close to real time as possible.
Execute ad hoc analytical queries on historical data to identify whether the loyalty club discounts increase
sales of the discounted products.
Every four hours, notify store employees about how many prepared food items to produce based on
historical demand from the sales data.

Requirements. Technical Requirements

Litware identifies the following technical requirements:

Minimize the number of different Azure services needed to achieve the business goals.
Use platform as a service (PaaS) offerings whenever possible and avoid having to provision virtual
machines that must be managed by Litware.
Ensure that the analytical data store is accessible only to the company’s on-premises network and Azure
services.
Use Azure Active Directory (Azure AD) authentication whenever possible.
Use the principle of least privilege when designing security.
Stage inventory data in Azure Data Lake Storage Gen2 before loading the data into the analytical data

62D227AA5C77F5C766AC37B5740F344D
store. Litware wants to remove transient data from Data Lake Storage once the data is no longer in use.
Files that have a modified date that is older than 14 days must be removed.
Limit the business analysts’ access to customer contact information, such as phone numbers, because this
type of data is not analytically relevant.
Ensure that you can quickly restore a copy of the analytical data store within one hour in the event of
corruption or accidental deletion.

Requirements. Planned Environment

Litware plans to implement the following environment:

The application development team will create an Azure event hub to receive real-time sales data, including
store number, date, time, product ID, customer loyalty number, price, and discount amount, from the point
of sale (POS) system and output the data to data storage in Azure.
Customer data, including name, contact information, and loyalty number, comes from Salesforce, a SaaS
application, and can be imported into Azure once every eight hours. Row modified dates are not trusted in
the source table.
Product data, including product ID, name, and category, comes from Salesforce and can be imported into
Azure once every eight hours. Row modified dates are not trusted in the source table.
Daily inventory data comes from a Microsoft SQL server located on a private network.
Litware currently has 5 TB of historical sales data and 100 GB of customer data. The company expects
approximately 100 GB of new data per month for the next year.
Litware will build a custom application named FoodPrep to provide store employees with the calculation
results of how many prepared food items to produce every four hours.
Litware does not plan to implement Azure ExpressRoute or a VPN between the on-premises network and
Azure.

QUESTION 1
Inventory levels must be calculated by subtracting the current day's sales from the previous day's final
inventory.

Which two options provide Litware with the ability to quickly calculate the current inventory levels by store and
product? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A. Consume the output of the event hub by using Azure Stream Analytics and aggregate the data by store and
product. Output the resulting data directly to Azure Synapse Analytics. Use Transact-SQL to calculate the
inventory levels.
B. Output Event Hubs Avro files to Azure Blob storage. Use Transact-SQL to calculate the inventory levels by
using PolyBase in Azure Synapse Analytics.
C. Consume the output of the event hub by using Databricks. Use Databricks to calculate the inventory levels
and output the data to Azure Synapse Analytics.
D. Consume the output of the event hub by using Azure Stream Analytics and aggregate the data by store and
product. Output the resulting data into Databricks. Calculate the inventory levels in Databricks and output
the data to Azure Blob storage.
E. Output Event Hubs Avro files to Azure Blob storage. Trigger an Azure Data Factory copy activity to run
every 10 minutes to load the data into Azure Synapse Analytics. Use Transact-SQL to aggregate the data
by store and product.

Correct Answer: AE
Section: (none)
Explanation

Explanation/Reference:
Explanation:
A: Azure Stream Analytics is a fully managed service providing low-latency, highly available, scalable complex
event processing over streaming data in the cloud. You can use your Azure Synapse Analytics (SQL Data

62D227AA5C77F5C766AC37B5740F344D
warehouse) database as an output sink for your Stream Analytics jobs.

E: Event Hubs Capture is the easiest way to get data into Azure. Using Azure Data Lake, Azure Data Factory,
and Azure HDInsight, you can perform batch processing and other analytics using familiar tools and platforms
of your choosing, at any scale you need.

Note: Event Hubs Capture creates files in Avro format.

Captured data is written in Apache Avro format: a compact, fast, binary format that provides rich data
structures with inline schema. This format is widely used in the Hadoop ecosystem, Stream Analytics, and
Azure Data Factory.

Scenario: The application development team will create an Azure event hub to receive real-time sales data,
including store number, date, time, product ID, customer loyalty number, price, and discount amount, from the
point of sale (POS) system and output the data to data storage in Azure.

Reference:
https://docs.microsoft.com/bs-latn-ba/azure/sql-data-warehouse/sql-data-warehouse-integrate-azure-stream-
analytics

https://docs.microsoft.com/en-us/azure/event-hubs/event-hubs-capture-overview

QUESTION 2
HOTSPOT

Which Azure Data Factory components should you recommend using together to import the customer data
from Salesforce to Data Lake Storage? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

Section: (none)
Explanation

Explanation/Reference:
Explanation:

Box 1: Self-hosted integration runtime


A self-hosted IR is capable of nunning copy activity between a cloud data stores and a data store in private
network.

Box 2: Schedule trigger


Schedule every 8 hours

Box 3: Copy activity

Scenario:
Customer data, including name, contact information, and loyalty number, comes from Salesforce and can
be imported into Azure once every eight hours. Row modified dates are not trusted in the source table.
Product data, including product ID, name, and category, comes from Salesforce and can be imported into
Azure once every eight hours. Row modified dates are not trusted in the source table.

QUESTION 3
HOTSPOT

Which Azure Data Factory components should you recommend using together to import the daily inventory
data from SQL to Azure Data Lake Storage? To answer, select the appropriate options in the answer area.

62D227AA5C77F5C766AC37B5740F344D
NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Box 1: Self-hosted integration runtime


A self-hosted IR is capable of nunning copy activity between a cloud data stores and a data store in private
network.

Scenario: Daily inventory data comes from a Microsoft SQL server located on a private network.

Box 2: Schedule trigger


Daily schedule

Box 3: Copy activity

Scenario:
Stage inventory data in Azure Data Lake Storage Gen2 before loading the data into the analytical data store.
Litware wants to remove transient data from Data Lake Storage once the data is no longer in use. Files that
have a modified date that is older than 14 days must be removed.

QUESTION 4
HOTSPOT

Which Azure service and feature should you recommend using to manage the transient data for Data Lake
Storage? To answer, select the appropriate options in the answer area.

62D227AA5C77F5C766AC37B5740F344D
NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

Section: (none)
Explanation

Explanation/Reference:

62D227AA5C77F5C766AC37B5740F344D
Explanation:

Scenario: Stage inventory data in Azure Data Lake Storage Gen2 before loading the data into the analytical
data store. Litware wants to remove transient data from Data Lake Storage once the data is no longer in use.
Files that have a modified date that is older than 14 days must be removed.

Service: Azure Data Factory


Clean up files by built-in delete activity in Azure Data Factory (ADF).
ADF built-in delete activity, which can be part of your ETL workflow to deletes undesired files without writing
code. You can use ADF to delete folder or files from Azure Blob Storage, Azure Data Lake Storage Gen1,
Azure Data Lake Storage Gen2, File System, FTP Server, sFTP Server, and Amazon S3.

You can delete expired files only rather than deleting all the files in one folder. For example, you may want to
only delete the files which were last modified more than 13 days ago.

Feature: Delete Activity

Reference:
https://azure.microsoft.com/sv-se/blog/clean-up-files-by-built-in-delete-activity-in-azure-data-factory/

62D227AA5C77F5C766AC37B5740F344D
Design data processing solutions

Question Set 7

QUESTION 1
You are designing an Azure Data Factory pipeline for processing data. The pipeline will process data that is
stored in general-purpose standard Azure storage.

You need to ensure that the compute environment is created on-demand and removed when the process is
completed.

Which type of activity should you recommend?

A. Databricks Python activity


B. Data Lake Analytics U-SQL activity
C. HDInsight Pig activity
D. Databricks Jar activity

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
The HDInsight Pig activity in a Data Factory pipeline executes Pig queries on your own or on-demand
HDInsight cluster.

Reference:
https://docs.microsoft.com/en-us/azure/data-factory/transform-data-using-hadoop-pig

QUESTION 2
A company installs IoT devices to monitor its fleet of delivery vehicles. Data from devices is collected from
Azure Event Hub.

The data must be transmitted to Power BI for real-time data visualizations.

You need to recommend a solution.

What should you recommend?

A. Azure HDInsight with Spark Streaming


B. Apache Spark in Azure Databricks
C. Azure Stream Analytics
D. Azure HDInsight with Storm

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Step 1: Get your IoT hub ready for data access by adding a consumer group.
Step 2: Create, configure, and run a Stream Analytics job for data transfer from your IoT hub to your Power BI
account.
Step 3: Create and publish a Power BI report to visualize the data.

Reference:

62D227AA5C77F5C766AC37B5740F344D
https://docs.microsoft.com/en-us/azure/iot-hub/iot-hub-live-data-visualization-in-power-bi

QUESTION 3
You have a Windows-based solution that analyzes scientific data. You are designing a cloud-based solution
that performs real-time analysis of the data.

You need to design the logical flow for the solution.

Which two actions should you recommend? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Send data from the application to an Azure Stream Analytics job.


B. Use an Azure Stream Analytics job on an edge device. Ingress data from an Azure Data Factory instance
and build queries that output to Power BI.
C. Use an Azure Stream Analytics job in the cloud. Ingress data from the Azure Event Hub instance and build
queries that output to Power BI.
D. Use an Azure Stream Analytics job in the cloud. Ingress data from an Azure Event Hub instance and build
queries that output to Azure Data Lake Storage.
E. Send data from the application to Azure Data Lake Storage.
F. Send data from the application to an Azure Event Hub instance.

Correct Answer: CF
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Stream Analytics has first-class integration with Azure data streams as inputs from three kinds of resources:
Azure Event Hubs
Azure IoT Hub
Azure Blob storage

Reference:
https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-define-inputs

QUESTION 4
DRAG DROP

You are designing a Spark job that performs batch processing of daily web log traffic.

When you deploy the job in the production environment, it must meet the following requirements:

Run once a day.


Display status information on the company intranet as the job runs.

You need to recommend technologies for triggering and monitoring jobs.

Which technologies should you recommend? To answer, drag the appropriate technologies to the correct
locations. Each technology may be used once, more than once, or not at all. You may need to drag the split bar
between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

Section: (none)
Explanation

Explanation/Reference:
Explanation:

Box 1: Livy
You can use Livy to run interactive Spark shells or submit batch jobs to be run on Spark.

Box 2: Beeline
Apache Beeline can be used to run Apache Hive queries on HDInsight. You can use Beeline with Apache
Spark.

62D227AA5C77F5C766AC37B5740F344D
Note: Beeline is a Hive client that is included on the head nodes of your HDInsight cluster. Beeline uses JDBC
to connect to HiveServer2, a service hosted on your HDInsight cluster. You can also use Beeline to access
Hive on HDInsight remotely over the internet.

Reference:
https://docs.microsoft.com/en-us/azure/hdinsight/spark/apache-spark-livy-rest-interface

https://docs.microsoft.com/en-us/azure/hdinsight/hadoop/apache-hadoop-use-hive-beeline

QUESTION 5
You are designing a real-time stream solution based on Azure Functions. The solution will process data
uploaded to Azure Blob Storage.

The solution requirements are as follows:

Support up to 1 million blobs.


Scaling must occur automatically.
Costs must be minimized.

What should you recommend?

A. Deploy the Azure Function in an App Service plan and use a Blob trigger.
B. Deploy the Azure Function in a Consumption plan and use an Event Grid trigger.
C. Deploy the Azure Function in a Consumption plan and use a Blob trigger.
D. Deploy the Azure Function in an App Service plan and use an Event Grid trigger.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Create a function, with the help of a blob trigger template, which is triggered when files are uploaded to or
updated in Azure Blob storage.
You use a consumption plan, which is a hosting plan that defines how resources are allocated to your function
app. In the default Consumption Plan, resources are added dynamically as required by your functions. In this
serverless hosting, you only pay for the time your functions run. When you run in an App Service plan, you
must manage the scaling of your function app.

Reference:
https://docs.microsoft.com/en-us/azure/azure-functions/functions-create-storage-blob-triggered-function

QUESTION 6
You plan to migrate data to Azure SQL Database.

The database must remain synchronized with updates to Microsoft Azure and SQL Server.

You need to set up the database as a subscriber.

What should you recommend?

A. Azure Data Factory


B. SQL Server Data Tools
C. Data Migration Assistant
D. SQL Server Agent for SQL Server 2017 or later
E. SQL Server Management Studio 17.9.1 or later

62D227AA5C77F5C766AC37B5740F344D
Correct Answer: E
Section: (none)
Explanation

Explanation/Reference:
Explanation:
To set up the database as a subscriber we need to configure database replication. You can use SQL Server
Management Studio to configure replication. Use the latest versions of SQL Server Management Studio in
order to be able to use all the features of Azure SQL Database.

Reference:
https://www.sqlshack.com/sql-server-database-migration-to-azure-sql-database-using-sql-server-transactional-
replication/

QUESTION 7
HOTSPOT

You are designing a solution for a company. You plan to use Azure Databricks.

You need to recommend workloads and tiers to meet the following requirements:

Provide managed clusters for running production jobs.


Provide persistent clusters that support auto-scaling for analytics processes.
Provide role-based access control (RBAC) support for Notebooks.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Box 1: Data Engineering Only

Box 2: Data Engineering and Data Analytics

Box 3: Standard

Box 4: Data Analytics only

Box 5: Premium
Premium required for RBAC. Data Analytics Premium Tier provide interactive workloads to analyze data
collaboratively with notebooks

Reference:
https://azure.microsoft.com/en-us/pricing/details/databricks/

QUESTION 8
You design data engineering solutions for a company.

A project requires analytics and visualization of large set of data. The project has the following requirements:

Notebook scheduling
Cluster automation
Power BI Visualization

You need to recommend the appropriate Azure service. Your solution must minimize the number of services
required.

Which Azure service should you recommend?

A. Azure Batch
B. Azure Stream Analytics
C. Azure Databricks
D. Azure HDInsight

62D227AA5C77F5C766AC37B5740F344D
Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
A databrick job is a way of running a notebook or JAR either immediately or on a scheduled basis.

Azure Databricks has two types of clusters: interactive and job. Interactive clusters are used to analyze data
collaboratively with interactive notebooks. Job clusters are used to run fast and robust automated workloads
using the UI or API.

You can visualize Data with Azure Databricks and Power BI Desktop.

Reference:
https://docs.azuredatabricks.net/user-guide/clusters/index.html

https://docs.azuredatabricks.net/user-guide/jobs.html

QUESTION 9
HOTSPOT

You design data engineering solutions for a company.

You must integrate on-premises SQL Server data into an Azure solution that performs Extract-Transform-Load
(ETL) operations have the following requirements:

Develop a pipeline that can integrate data and run notebooks.


Develop notebooks to transform the data.
Load the data into a massively parallel processing database for later analysis.

You need to recommend a solution.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:

QUESTION 10
A company plans to use Apache Spark Analytics to analyze intrusion detection data.

You need to recommend a solution to monitor network and system activities for malicious activities and policy
violations. Reports must be produced in an electronic format and sent to management. The solution must
minimize administrative efforts.

What should you recommend?

A. Azure Data Factory


B. Azure Data Lake Storage

62D227AA5C77F5C766AC37B5740F344D
C. Azure Databricks
D. Azure HDInsight

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Explanation:
With Azure HDInsight you can set up Azure Monitor alerts that will trigger when the value of a metric or the
results of a query meet certain conditions. You can condition on a query returning a record with a value that is
greater than or less than a certain threshold, or even on the number of results returned by a query. For
example, you could create an alert to send an email if a Spark job fails or if a Kafka disk usage becomes over
90 percent full.

Reference:
https://azure.microsoft.com/en-us/blog/monitoring-on-azure-hdinsight-part-4-workload-metrics-and-logs/

QUESTION 11
DRAG DROP

You are planning a design pattern based on the Lambda architecture as shown in the exhibit.

Which Azure services should you use for the cold path? To answer, drag the appropriate services to the
correct layers. Each service may be used once, more than once, or not at all. You may need to drag the split
bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

Section: (none)
Explanation

Explanation/Reference:
Explanation:

Layer 2: Azure Data Lake Storage Gen2

Layer 3: Azure Synapse Analytics


Azure Synapse Analytics can be used for batch processing.

Note: Layer 1 = speed layer, layer 2 = batch layer, layer 3 = serving layer

Note 2: Lambda architectures use batch-processing, stream-processing, and a serving layer to minimize the
latency involved in querying big data.

62D227AA5C77F5C766AC37B5740F344D
Reference:
https://azure.microsoft.com/en-us/blog/lambda-architecture-using-azure-cosmosdb-faster-performance-low-
tco-low-devops/

https://docs.microsoft.com/en-us/azure/architecture/data-guide/technology-choices/batch-processing

QUESTION 12
You are designing an Azure Databricks interactive cluster. The cluster will be used infrequently and will be
configured for auto-termination.

You need to ensure that the cluster configuration is retained indefinitely after the cluster is terminated. The
solution must minimize costs.

What should you do?

A. Clone the cluster after it is terminated.


B. Terminate the cluster manually when processing completes.
C. Create an Azure runbook that starts the cluster every 90 days.
D. Pin the cluster.

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Explanation:
To keep an interactive cluster configuration even after it has been terminated for more than 30 days, an
administrator can pin a cluster to the cluster list.

Reference:
https://docs.azuredatabricks.net/clusters/clusters-manage.html#automatic-termination

QUESTION 13
HOTSPOT

62D227AA5C77F5C766AC37B5740F344D
You are planning a design pattern based on the Kappa architecture as shown in the exhibit.

Which Azure service should you use for each layer? To answer, select the appropriate options in the answer
area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Layer 1: Azure Data Factory

Layer 2: Azure Databricks


Azure Databricks is fully integrated with Azure Data Factory .

Reference:
https://docs.microsoft.com/en-us/azure/architecture/data-guide/big-data/

62D227AA5C77F5C766AC37B5740F344D
QUESTION 14
You need to design a telemetry data solution that supports the analysis of log files in real time.

Which two Azure services should you include in the solution? Each correct answer presents part of the
solution.

NOTE: Each correct selection is worth one point.

A. Azure Databricks
B. Azure Data Factory
C. Azure Event Hubs
D. Azure Data Lake Storage Gen2

Correct Answer: AC
Section: (none)
Explanation

Explanation/Reference:
Explanation:
You connect a data ingestion system with Azure Databricks to stream data into an Apache Spark cluster in
near real-time. You set up data ingestion system using Azure Event Hubs and then connect it to Azure
Databricks to process the messages coming through.

Note: Azure Event Hubs is a highly scalable data streaming platform and event ingestion service, capable of
receiving and processing millions of events per second. Event Hubs can process and store events, data, or
telemetry produced by distributed software and devices. Data sent to an event hub can be transformed and
stored using any real-time analytics provider or batching/storage adapters.

Reference:
https://docs.microsoft.com/en-us/azure/azure-databricks/databricks-stream-from-eventhubs

QUESTION 15
You are planning a design pattern based on the Lambda architecture as shown in the exhibit.

Which Azure service should you use for the hot path?

62D227AA5C77F5C766AC37B5740F344D
A. Azure Databricks
B. Azure Data Lake Storage Gen2
C. Azure Data Factory
D. Azure Database for PostgreSQL

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
In Azure, all of the following data stores will meet the core requirements supporting real-time processing:

Apache Spark in Azure Databricks


Azure Stream Analytics
HDInsight with Spark Streaming
HDInsight with Storm
Azure Functions
Azure App Service WebJobs

Note: Lambda architectures use batch-processing, stream-processing, and a serving layer to minimize the
latency involved in querying big data.

Reference:
https://azure.microsoft.com/en-us/blog/lambda-architecture-using-azure-cosmosdb-faster-performance-low-
tco-low-devops/

https://docs.microsoft.com/en-us/azure/architecture/data-guide/technology-choices/stream-processing

QUESTION 16
You are designing an audit strategy for an Azure SQL Database environment.

You need to recommend a solution to provide real-time notifications for potential security breaches. The

62D227AA5C77F5C766AC37B5740F344D
solution must minimize development effort.

Which destination should you include in the recommendation?

A. Azure Blob storage


B. Azure Synapse Analytics
C. Azure Event Hubs
D. Azure Log Analytics

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Auditing for Azure SQL Database and SQL Data Warehouse tracks database events and writes them to an
audit log in your Azure storage account, Log Analytics workspace or Event Hubs.

Alerts in Azure Monitor can identify important information in your Log Analytics repository. They are created by
alert rules that automatically run log searches at regular intervals, and if results of the log search match
particular criteria, then an alert record is created and it can be configured to perform an automated response.

Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-auditing

https://docs.microsoft.com/en-us/azure/azure-monitor/learn/tutorial-response

QUESTION 17
You need to design a real-time stream solution that uses Azure Functions to process data uploaded to Azure
Blob Storage.

The solution must meet the following requirements:

Support up to 1 million blobs.


Scaling must occur automatically.
Costs must be minimized.

What should you recommend?

A. Deploy the Azure Function in an App Service plan and use a Blob trigger.
B. Deploy the Azure Function in a Consumption plan and use an Event Grid trigger.
C. Deploy the Azure Function in a Consumption plan and use a Blob trigger.
D. Deploy the Azure Function in an App Service plan and use an Event Grid trigger.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Create a function, with the help of a blob trigger template, which is triggered when files are uploaded to or
updated in Azure Blob storage.
You use a consumption plan, which is a hosting plan that defines how resources are allocated to your function
app. In the default Consumption Plan, resources are added dynamically as required by your functions. In this
serverless hosting, you only pay for the time your functions run. When you run in an App Service plan, you
must manage the scaling of your function app.

Reference:

62D227AA5C77F5C766AC37B5740F344D
https://docs.microsoft.com/en-us/azure/azure-functions/functions-create-storage-blob-triggered-function

QUESTION 18
A company purchases IoT devices to monitor manufacturing machinery. The company uses an IoT appliance
to communicate with the IoT devices.

The company must be able to monitor the devices in real-time.

You need to design the solution.

What should you recommend?

A. Azure Data Factory instance using Azure PowerShell


B. Azure Analysis Services using Microsoft Visual Studio
C. Azure Stream Analytics cloud job using Azure PowerShell
D. Azure Data Factory instance using Microsoft Visual Studio

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Stream Analytics is a cost-effective event processing engine that helps uncover real-time insights from
devices, sensors, infrastructure, applications and data quickly and easily.

Monitor and manage Stream Analytics resources with Azure PowerShell cmdlets and powershell scripting that
execute basic Stream Analytics tasks.

Note: Visual Studio 2019 and Visual Studio 2017 also support Stream Analytics Tools.

Reference:
https://cloudblogs.microsoft.com/sqlserver/2014/10/29/microsoft-adds-iot-streaming-analytics-data-production-
and-workflow-services-to-azure/

QUESTION 19
HOTSPOT

You plan to create a real-time monitoring app that alerts users when a device travels more than 200 meters
away from a designated location.

You need to design an Azure Stream Analytics job to process the data for the planned app. The solution must
minimize the amount of code developed and the number of technologies used.

What should you include in the Stream Analytics job? To answer, select the appropriate options in the answer
area.

NOTE: Each correct selection is worth one point.

Hot Area:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Input type: Stream


You can process real-time IoT data streams with Azure Stream Analytics.

Input source: Azure IoT Hub


In a real-world scenario, you could have hundreds of these sensors generating events as a stream. Ideally, a
gateway device would run code to push these events to Azure Event Hubs or Azure IoT Hubs.

Function: Geospatial
With built-in geospatial functions, you can use Azure Stream Analytics to build applications for scenarios such
as fleet management, ride sharing, connected cars, and asset tracking.

Reference:
https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-get-started-with-azure-stream-
analytics-to-process-data-from-iot-devices

https://docs.microsoft.com/en-us/azure/stream-analytics/geospatial-scenarios

QUESTION 20
A company purchases IoT devices to monitor manufacturing machinery. The company uses an IoT appliance
to communicate with the IoT devices.

62D227AA5C77F5C766AC37B5740F344D
The company must be able to monitor the devices in real-time.

You need to design the solution.

What should you recommend?

A. Azure Data Factory instance using the Azure portal


B. Azure Analysis Services using Microsoft Visual Studio
C. Azure Stream Analytics Edge application using Microsoft Visual Studio
D. Azure Analysis Services using the Azure portal

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Azure Stream Analytics (ASA) on IoT Edge empowers developers to deploy near-real-time analytical
intelligence closer to IoT devices so that they can unlock the full value of device-generated data.

Reference:
https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-edge

QUESTION 21
You plan to ingest streaming social media data by using Azure Stream Analytics. The data will be stored in files
in Azure Data Lake Storage, and then consumed by using Azure Databricks and PolyBase in Azure Synapse
Analytics.

You need to recommend a Stream Analytics data output format to ensure that the queries from Databricks and
PolyBase against the files encounter the fewest possible errors. The solution must ensure that the files can be
queried quickly and that the data type information is retained.

What should you recommend?

A. Avro
B. CSV
C. Parquet
D. JSON

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
The Avro format is great for data and message preservation.

Avro schema with its support for evolution is essential for making the data robust for streaming architectures
like Kafka, and with the metadata that schema provides, you can reason on the data. Having a schema
provides robustness in providing meta-data about the data stored in Avro records which are self-documenting
the data.

References:
http://cloudurable.com/blog/avro/index.html

QUESTION 22
HOTSPOT

62D227AA5C77F5C766AC37B5740F344D
The following code segment is used to create an Azure Databricks cluster.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Hot Area:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

Section: (none)
Explanation

Explanation/Reference:
Box 1: Yes

Box 2: No
autotermination_minutes: Automatically terminates the cluster after it is inactive for this time in minutes. If not
set, this cluster will not be automatically terminated. If specified, the threshold must be between 10 and 10000
minutes. You can also set this value to 0 to explicitly disable automatic termination.

Box 3: Yes

References:

62D227AA5C77F5C766AC37B5740F344D
https://docs.databricks.com/dev-tools/api/latest/clusters.html

QUESTION 23
HOTSPOT

A company stores large datasets in Azure, including sales transactions and customer account information.

You must design a solution to analyze the data. You plan to create the following HDInsight clusters:

You need to ensure that the clusters support the query requirements.

Which cluster types should you recommend? To answer, select the appropriate configuration in the answer
area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Box 1: Interactive Query


Choose Interactive Query cluster type to optimize for ad hoc, interactive queries.

Box 2: Hadoop
Choose Apache Hadoop cluster type to optimize for Hive queries used as a batch process.

Note: In Azure HDInsight, there are several cluster types and technologies that can run Apache Hive queries.
When you create your HDInsight cluster, choose the appropriate cluster type to help optimize performance for
your workload needs.

For example, choose Interactive Query cluster type to optimize for ad hoc, interactive queries. Choose Apache
Hadoop cluster type to optimize for Hive queries used as a batch process. Spark and HBase cluster types can
also run Hive queries.

Reference:
https://docs.microsoft.com/bs-latn-ba/azure/hdinsight/hdinsight-hadoop-optimize-hive-query?toc=%2Fko-kr%
2Fazure%2Fhdinsight%2Finteractive-query%2FTOC.json&bc=%2Fbs-latn-ba%2Fazure%2Fbread%2Ftoc.json

QUESTION 24
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

62D227AA5C77F5C766AC37B5740F344D
After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You have streaming data that is received by Azure Event Hubs and stored in Azure Blob storage. The data
contains social media posts that relate to a keyword of Contoso.

You need to count how many times the Contoso keyword and a keyword of Litware appear in the same post
every 30 seconds. The data must be available to Microsoft Power BI in near real-time.

Solution: You use Azure Data Factory and an event trigger to detect when new blobs are created. You use
mapping data flows in Azure Data Factory to aggregate and filter the data, and then send the data to an Azure
SQL database. You consume the data in Power BI by using DirectQuery mode.

Does the solution meet the goal?

A. Yes
B. No

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 25
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You have streaming data that is received by Azure Event Hubs and stored in Azure Blob storage. The data
contains social media posts that relate to a keyword of Contoso.

You need to count how many times the Contoso keyword and a keyword of Litware appear in the same post
every 30 seconds. The data must be available to Microsoft Power BI in near real-time.

Solution: You create an Azure Stream Analytics job that uses an input from Event Hubs to count the posts that
have the specified keywords, and then send the data to an Azure SQL database. You consume the data in
Power BI by using DirectQuery mode.

Does the solution meet the goal?

A. Yes
B. No

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Reference:
https://docs.microsoft.com/en-us/power-bi/service-real-time-streaming

https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-twitter-sentiment-analysis-trends

62D227AA5C77F5C766AC37B5740F344D
QUESTION 26
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You have streaming data that is received by Azure Event Hubs and stored in Azure Blob storage. The data
contains social media posts that relate to a keyword of Contoso.

You need to count how many times the Contoso keyword and a keyword of Litware appear in the same post
every 30 seconds. The data must be available to Microsoft Power BI in near real-time.

Solution: You use Azure Databricks to create a Scala notebook. You use a Structured Streaming job to
connect to the event hub that counts the posts that have the specified keywords, and then writes the data to a
Delta table. You consume the data in Power BI by using DirectQuery mode.

Does the solution meet the goal?

A. Yes
B. No

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:

QUESTION 27
You are planning a design pattern based on the Lambda architecture as shown in the exhibit.

Which Azure service should you use for the hot path?

A. Azure Synapse Analytics


B. Azure SQL Database

62D227AA5C77F5C766AC37B5740F344D
C. Azure Cosmos DB
D. Azure Data Catalog

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
In Azure, all of the following data stores will meet the core requirements supporting real-time processing:

Apache Spark in Azure Databricks


Azure Stream Analytics
HDInsight with Spark Streaming
HDInsight with Storm
Azure Functions
Azure App Service WebJobs

Note: Lambda architectures use batch-processing, stream-processing, and a serving layer to minimize the
latency involved in querying big data.

Reference:
https://azure.microsoft.com/en-us/blog/lambda-architecture-using-azure-cosmosdb-faster-performance-low-
tco-low-devops/

https://docs.microsoft.com/en-us/azure/architecture/data-guide/technology-choices/stream-processing

https://docs.microsoft.com/en-us/azure/cosmos-db/lambda-architecture

QUESTION 28
You are designing an enterprise data warehouse in Azure Synapse Analytics. You plan to load millions of rows
of data into the data warehouse each day.

You must ensure that staging tables are optimized for data loading.

62D227AA5C77F5C766AC37B5740F344D
You need to design the staging tables.

What type of tables should you recommend?

A. Round-robin distributed table


B. Hash-distributed table
C. Replicated table
D. External table

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
To achieve the fastest loading speed for moving data into a data warehouse table, load data into a staging
table. Define the staging table as a heap and use round-robin for the distribution option.

Incorrect:
Not B: Consider that loading is usually a two-step process in which you first load to a staging table and then
insert the data into a production data warehouse table. If the production table uses a hash distribution, the total
time to load and insert might be faster if you define the staging table with the hash distribution. Loading to the
staging table takes longer, but the second step of inserting the rows to the production table does not incur data
movement across the distributions.

Reference:
https://docs.microsoft.com/en-us/azure/sql-data-warehouse/guidance-for-loading-data

QUESTION 29
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You have streaming data that is received by Azure Event Hubs and stored in Azure Blob storage. The data
contains social media posts that relate to a keyword of Contoso.

You need to count how many times the Contoso keyword and a keyword of Litware appear in the same post
every 30 seconds. The data must be available to Microsoft Power BI in near real-time.

Solution: You create an Azure Stream Analytics job that uses an input from Event Hubs to count the posts that
have the specified keywords, and then send the data directly to Power BI.

Does the solution meet the goal?

A. Yes
B. No

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
DirectQuery mode is required for automatic page refresh.

62D227AA5C77F5C766AC37B5740F344D
Reference:
https://docs.microsoft.com/en-us/power-bi/service-real-time-streaming

https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-twitter-sentiment-analysis-trends

QUESTION 30
A company has an application that uses Azure SQL Database as the data store.

The application experiences a large increase in activity during the last month of each year.

You need to manually scale the Azure SQL Database instance to account for the increase in data write
operations.

Which scaling method should you recommend?

A. Scale up by using elastic pools to distribute resources.


B. Scale out by sharding the data across databases.
C. Scale up by increasing the database throughput units.

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
As of now, the cost of running an Azure SQL database instance is based on the number of Database
Throughput Units (DTUs) allocated for the database. When determining the number of units to allocate for the
solution, a major contributing factor is to identify what processing power is needed to handle the volume of
expected requests.
Running the statement to upgrade/downgrade your database takes a matter of seconds.

Incorrect Answers:
A: Elastic pools is used if there are two or more databases.

Reference:
https://www.skylinetechnologies.com/Blog/Skyline-Blog/August_2017/dynamically-scale-azure-sql-database

QUESTION 31
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You have an Azure Data Lake Storage account that contains a staging zone.

You need to design a daily process to ingest incremental data from the staging zone, transform the data by
executing an R script, and then insert the transformed data into a data warehouse in Azure Synapse Analytics.

Solution: You use an Azure Data Factory schedule trigger to execute a pipeline that copies the data to a
staging table in the data warehouse, and then uses a stored procedure to execute the R script.

Does this meet the goal?

A. Yes
B. No

62D227AA5C77F5C766AC37B5740F344D
Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
If you need to transform data in a way that is not supported by Data Factory, you can create a custom activity
with your own data processing logic and use the activity in the pipeline. You can create a custom activity to run
R scripts on your HDInsight cluster with R installed.

Reference:
https://docs.microsoft.com/en-US/azure/data-factory/transform-data

QUESTION 32
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You have an Azure Data Lake Storage account that contains a staging zone.

You need to design a daily process to ingest incremental data from the staging zone, transform the data by
executing an R script, and then insert the transformed data into a data warehouse in Azure Synapse Analytics.

Solution: You schedule an Azure Databricks job that executes an R notebook, and then inserts the data into
the data warehouse.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
You should use an Azure Data Factory, not an Azure Databricks job.

Reference:
https://docs.microsoft.com/en-US/azure/data-factory/transform-data

QUESTION 33
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You have an Azure Data Lake Storage account that contains a staging zone.

You need to design a daily process to ingest incremental data from the staging zone, transform the data by
executing an R script, and then insert the transformed data into a data warehouse in Azure Synapse Analytics.

Solution: You use an Azure Data Factory schedule trigger to execute a pipeline that executes an Azure

62D227AA5C77F5C766AC37B5740F344D
Databricks notebook, and then inserts the data into the data warehouse.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Use a stored procedure, not an Azure Databricks notebook to invoke the R script.

Reference:
https://docs.microsoft.com/en-US/azure/data-factory/transform-data

QUESTION 34
A company purchases IoT devices to monitor manufacturing machinery. The company uses an Azure IoT Hub
to communicate with the IoT devices.

The company must be able to monitor the devices in real-time.

You need to design the solution.

What should you recommend?

A. Azure Data Factory instance using Azure Portal


B. Azure Analysis Services using Microsoft Visual Studio
C. Azure Stream Analytics Edge application using Microsoft Visual Studio
D. Azure Data Factory instance using Microsoft Visual Studio

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Azure Stream Analytics (ASA) on IoT Edge empowers developers to deploy near-real-time analytical
intelligence closer to IoT devices so that they can unlock the full value of device-generated data.

You can use Visual Studio plugin to create an ASA Edge job.

Reference:
https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-edge

QUESTION 35
A company has a real-time data analysis solution that is hosted on Microsoft Azure. The solution uses Azure
Event Hub to ingest data and an Azure Stream Analytics cloud job to analyze the data. The cloud job is
configured to use 120 Streaming Units (SU).

You need to optimize performance for the Azure Stream Analytics job.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

62D227AA5C77F5C766AC37B5740F344D
A. Implement event ordering
B. Scale the SU count for the job up
C. Implement Azure Stream Analytics user-defined functions (UDF)
D. Scale the SU count for the job down
E. Implement query parallelization by partitioning the data output
F. Implement query parallelization by partitioning the data output

Correct Answer: BF
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Scale out the query by allowing the system to process each input partition separately.
F: A Stream Analytics job definition includes inputs, a query, and output. Inputs are where the job reads the
data stream from.

Reference:
https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-parallelization

QUESTION 36
You manage a process that performs analysis of daily web traffic logs on an HDInsight cluster. Each of the 250
web servers generates approximately 10megabytes (MB) of log data each day. All log data is stored in a single
folder in Microsoft Azure Data Lake Storage Gen 2.

You need to improve the performance of the process.

Which two changes should you make? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A. Combine the daily log files for all servers into one file
B. Increase the value of the mapreduce.map.memory parameter
C. Move the log files into folders so that each day’s logs are in their own folder
D. Increase the number of worker nodes
E. Increase the value of the hive.tez.container.size parameter

Correct Answer: AC
Section: (none)
Explanation

Explanation/Reference:
Explanation:
A: Typically, analytics engines such as HDInsight and Azure Data Lake Analytics has a per-five overhead. If
you store your data as many small files, this can negatively affect performance. In general, organize your data
into larger sized files for better performance (256MB to 100GB in size). Some engines and applications might
have trouble efficiently processing files that are greater than 100GB in size.
C: For Hive workloads, partition pruning of time-series data can help some queries read only a subset of the
data which improves performance.
Those pipelines that ingest time-series data, often place their files with a very structured naming for files and
folders. Below is a very common example we see for data is structured by date:
\DataSet\YYYY\MM\DD\datafile_YYYY_MM_DD.tsv
Notice that the datetime information appears both as folders and in the filename.

Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/data-lake-storage-performance-tuning-guidance

62D227AA5C77F5C766AC37B5740F344D
QUESTION 37
A company purchases IoT devices to monitor manufacturing machinery. The company uses an IoT appliance
to communicate with the IoT devices.

The company must be able to monitor the devices in real-time.

You need to design the solution.

What should you recommend?

A. Azure Analysis Services using Azure Portal


B. Azure Analysis Services using Microsoft Visual Studio
C. Azure Stream Analytics Edge application using Microsoft Visual Studio
D. Azure Data Factory instance using Microsoft Visual Studio

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Stream Analytics is a cost-effective event processing engine that helps uncover real-time insights from
devices, sensors, infrastructure, applications and data quickly and easily.

Visual Studio 2019 and Visual Studio 2017 support Stream Analytics Tools.

Note: You can also monitor and manage Stream Analytics resources with Azure PowerShell cmdlets and
powershell scripting that execute basic Stream Analytics tasks.

Reference:
https://cloudblogs.microsoft.com/sqlserver/2014/10/29/microsoft-adds-iot-streaming-analytics-data-production-
and-workflow-services-to-azure/

https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-tools-for-visual-studio-install

QUESTION 38
You are designing an anomaly detection solution for streaming data from an Azure IoT hub. The solution must
meet the following requirements:

Send the output to Azure Synapse.


Identify spikes and dips in time series data.
Minimize development and configuration effort

Which should you include in the solution?

A. Azure Databricks
B. Azure Stream Analytics
C. Azure SQL Database

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
You can identify anomalies by routing data via IoT Hub to a built-in ML model in Azure Stream Analytics.

Reference:

62D227AA5C77F5C766AC37B5740F344D
https://docs.microsoft.com/en-us/learn/modules/data-anomaly-detection-using-azure-iot-hub/

62D227AA5C77F5C766AC37B5740F344D
Design for data security and compliance

Testlet 1

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Overview

Litware, Inc. owns and operates 300 convenience stores across the US. The company sells a variety of
packaged foods and drinks, as well as a variety of prepared foods, such as sandwiches and pizzas.

Litware has a loyalty club whereby members can get daily discounts on specific items by providing their
membership number at checkout.

Litware employs business analysts who prefer to analyze data by using Microsoft Power BI, and data scientists
who prefer analyzing data in Azure Databricks notebooks.

Requirements. Business Goals

Litware wants to create a new analytics environment in Azure to meet the following requirements:

See inventory levels across the stores. Data must be updated as close to real time as possible.
Execute ad hoc analytical queries on historical data to identify whether the loyalty club discounts increase
sales of the discounted products.
Every four hours, notify store employees about how many prepared food items to produce based on
historical demand from the sales data.

Requirements. Technical Requirements

Litware identifies the following technical requirements:


Minimize the number of different Azure services needed to achieve the business goals.
Use platform as a service (PaaS) offerings whenever possible and avoid having to provision virtual
machines that must be managed by Litware.
Ensure that the analytical data store is accessible only to the company’s on-premises network and Azure
services.
Use Azure Active Directory (Azure AD) authentication whenever possible.
Use the principle of least privilege when designing security.
Stage inventory data in Azure Data Lake Storage Gen2 before loading the data into the analytical data
store. Litware wants to remove transient data from Data Lake Storage once the data is no longer in use.

62D227AA5C77F5C766AC37B5740F344D
Files that have a modified date that is older than 14 days must be removed.
Limit the business analysts’ access to customer contact information, such as phone numbers, because this
type of data is not analytically relevant.
Ensure that you can quickly restore a copy of the analytical data store within one hour in the event of
corruption or accidental deletion.

Requirements. Planned Environment

Litware plans to implement the following environment:


The application development team will create an Azure event hub to receive real-time sales data, including
store number, date, time, product ID, customer loyalty number, price, and discount amount, from the point
of sale (POS) system and output the data to data storage in Azure.
Customer data, including name, contact information, and loyalty number, comes from Salesforce, a SaaS
application, and can be imported into Azure once every eight hours. Row modified dates are not trusted in
the source table.
Product data, including product ID, name, and category, comes from Salesforce and can be imported into
Azure once every eight hours. Row modified dates are not trusted in the source table.
Daily inventory data comes from a Microsoft SQL server located on a private network.
Litware currently has 5 TB of historical sales data and 100 GB of customer data. The company expects
approximately 100 GB of new data per month for the next year.
Litware will build a custom application named FoodPrep to provide store employees with the calculation
results of how many prepared food items to produce every four hours.
Litware does not plan to implement Azure ExpressRoute or a VPN between the on-premises network and
Azure.

QUESTION 1
What should you recommend to prevent users outside the Litware on-premises network from accessing the
analytical data store?

A. a server-level virtual network rule


B. a database-level virtual network rule
C. a database-level firewall IP rule
D. a server-level firewall IP rule

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Scenario: Ensure that the analytical data store is accessible only to the company’s on-premises network and
Azure services.

Virtual network rules are one firewall security feature that controls whether the database server for your single
databases and elastic pool in Azure SQL Database or for your databases in SQL Data Warehouse accepts
communications that are sent from particular subnets in virtual networks.

Server-level, not database-level: Each virtual network rule applies to your whole Azure SQL Database server,
not just to one particular database on the server. In other words, virtual network rule applies at the server-level,
not at the database-level.

Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-vnet-service-endpoint-rule-overview

QUESTION 2
DRAG DROP

You discover that the highest chance of corruption or bad data occurs during nightly inventory loads.

62D227AA5C77F5C766AC37B5740F344D
You need to ensure that you can quickly restore the data to its state before the nightly load and avoid missing
any streaming data.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of
actions to the answer area and arrange them in the correct order.

Select and Place:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Scenario: Daily inventory data comes from a Microsoft SQL server located on a private network.

Step 1: Before the nightly load, create a user-defined restore point


SQL Data Warehouse performs a geo-backup once per day to a paired data center. The RPO for a geo-
restore is 24 hours. If you require a shorter RPO for geo-backups, you can create a user-defined restore point
and restore from the newly created restore point to a new data warehouse in a different region.

Step 2: Restore the data warehouse to a new name on the same server.

Step 3: Swap the restored database warehouse name.

Reference:
https://docs.microsoft.com/en-us/azure/sql-data-warehouse/backup-and-restore

QUESTION 3
What should you recommend using to secure sensitive customer contact information?

A. data sensitivity labels


B. column-level security
C. row-level security
D. Transparent Data Encryption (TDE)

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Scenario: Limit the business analysts’ access to customer contact information, such as phone numbers,
because this type of data is not analytically relevant.

Labeling: You can apply sensitivity-classification labels persistently to columns by using new metadata
attributes that have been added to the SQL Server database engine. This metadata can then be used for
advanced, sensitivity-based auditing and protection scenarios.

Incorrect Answers:
D: Transparent Data Encryption (TDE) encrypts SQL Server, Azure SQL Database, and Azure Synapse
Analytics data files, known as encrypting data at rest. TDE does not provide encryption across communication
channels.

Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/database/data-discovery-and-classification-overview

https://docs.microsoft.com/en-us/azure/sql-database/sql-database-security-overview

QUESTION 4
DRAG DROP

Which three actions should you perform in sequence to allow FoodPrep access to the analytical data store? To
answer, move the appropriate actions from the list of actions to the answer area and arrange them in the
correct order.

Select and Place:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

Section: (none)
Explanation

Explanation/Reference:
Explanation:

Scenario: Litware will build a custom application named FoodPrep to provide store employees with the
calculation results of how many prepared food items to produce every four hours.

62D227AA5C77F5C766AC37B5740F344D
Step 1: Register the FoodPrep application in Azure AD
You create your Azure AD application and service principal.

Step 2: Create a login for the service principal on the Azure SQL Server

Step 3: Create a user-defined database role that grant access..


To access resources in your subscription, you must assign the application to a role.
You can then assign the required permissions to the service principal.

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/develop/howto-create-service-principal-portal

62D227AA5C77F5C766AC37B5740F344D
Design for data security and compliance

Testlet 2

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Background

Current environment

The company has the following virtual machines (VMs):

Requirements

Storage and processing

You must be able to use a file system view of data stored in a blob.
You must build an architecture that will allow Contoso to use the DB FS filesystem layer over a blob store. The
architecture will need to support data files, libraries, and images. Additionally, it must provide a web-based
interface to documents that contain runnable command, visualizations, and narrative text such as a notebook.

CONT_SQL3 requires an initial scale of 35000 IOPS.


CONT_SQL1 and CONT_SQL2 must use the vCore model and should include replicas. The solution must
support 8000 IOPS.
The storage should be configured to optimized storage for database OLTP workloads.

62D227AA5C77F5C766AC37B5740F344D
Migration

You must be able to independently scale compute and storage resources.


You must migrate all SQL Server workloads to Azure. You must identify related machines in the on-
premises environment, get disk size data usage information.
Data from SQL Server must include zone redundant storage.
You need to ensure that app components can reside on-premises while interacting with components that
run in the Azure public cloud.
SAP data must remain on-premises.
The Azure Site Recovery (ASR) results should contain per-machine data.

Business requirements

You must design a regional disaster recovery topology.


The database backups have regulatory purposes and must be retained for seven years.
CONT_SQL1 stores customers sales data that requires ETL operations for data analysis. A solution is
required that reads data from SQL, performs ETL, and outputs to Power BI. The solution should use
managed clusters to minimize costs. To optimize logistics, Contoso needs to analyze customer sales data
to see if certain products are tied to specific times in the year.
The analytics solution for customer sales data must be available during a regional outage.

Security and auditing

Contoso requires all corporate computers to enable Windows Firewall.


Azure servers should be able to ping other Contoso Azure servers.
Employee PII must be encrypted in memory, in motion, and at rest. Any data encrypted by SQL Server must
support equality searches, grouping, indexing, and joining on the encrypted data.
Keys must be secured by using hardware security modules (HSMs).
CONT_SQL3 must not communicate over the default ports

Cost

All solutions must minimize cost and resources.


The organization does not want any unexpected charges.
The data engineers must set the SQL Data Warehouse compute resources to consume 300 DWUs.
CONT_SQL2 is not fully utilized during non-peak hours. You must minimize resource costs for during non-
peak hours.

QUESTION 1
HOTSPOT

You need to design network access to the SQL Server data.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

Section: (none)
Explanation

Explanation/Reference:
Explanation:

Box 1: 8080
1433 is the default port, but we must change it as CONT_SQL3 must not communicate over the default ports.
Because port 1433 is the known standard for SQL Server, some organizations specify that the SQL Server port
number should be changed to enhance security.

Box 2: SQL Server Configuration Manager


You can configure an instance of the SQL Server Database Engine to listen on a specific fixed port by using
the SQL Server Configuration Manager.

62D227AA5C77F5C766AC37B5740F344D
Reference:
https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/configure-a-server-to-listen-on-a-
specific-tcp-port?view=sql-server-2017

62D227AA5C77F5C766AC37B5740F344D
Design for data security and compliance

Testlet 3

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Overview

General Overview

ADatum Corporation is a medical company that has 5,000 physicians located in more than 300 hospitals
across the US. The company has a medical department, a sales department, a marketing department, a
medical research department, and a human resources department.

You are redesigning the application environment of ADatum.

Physical Locations

ADatum has three main offices in New York, Dallas, and Los Angeles. The offices connect to each other by
using a WAN link. Each office connects directly to the Internet. The Los Angeles office also has a datacenter
that hosts all the company's applications.

Existing Environment

Health Review

ADatum has a critical OLTP web application named Health Review that physicians use to track billing, patient
care, and overall physician best practices.

Health Interface

ADatum has a critical application named Health Interface that receives hospital messages related to patient
care and status updates. The messages are sent in batches by each hospital's enterprise relationship
management (ERM) system by using a VPN. The data sent from each hospital can have varying columns and
formats.

Currently, a custom C# application is used to send the data to Health Interface. The application uses
deprecated libraries and a new solution must be designed for this functionality.

62D227AA5C77F5C766AC37B5740F344D
Health Insights

ADatum has a web-based reporting system named Health Insights that shows hospital and patient insights to
physicians and business users. The data is created from the data in Health Review and Health Interface, as
well as manual entries.

Database Platform

Currently, the databases for all three applications are hosted on an out-of-date VMware cluster that has a
single instance of Microsoft SQL Server 2012.

Problem Statements

ADatum identifies the following issues in its current environment:

Over time, the data received by Health Interface from the hospitals has slowed, and the number of
messages has increased.
When a new hospital joins ADatum, Health Interface requires a schema modification due to the lack of data
standardization.
The speed of batch data processing is inconsistent.

Business Requirements

Business Goals

ADatum identifies the following business goals:

Migrate the applications to Azure whenever possible.


Minimize the development effort required to perform data movement.
Provide continuous integration and deployment for development, test, and production environments.
Provide faster access to the applications and the data and provide more consistent application
performance.
Minimize the number of services required to perform data processing, development, scheduling, monitoring,
and the operationalizing of pipelines.

Health Review Requirements

ADatum identifies the following requirements for the Health Review application:

Ensure that sensitive health data is encrypted at rest and in transit.


Tag all the sensitive health data in Health Review. The data will be used for auditing.

Health Interface Requirements

ADatum identifies the following requirements for the Health Interface application:

Upgrade to a data storage solution that will provide flexible schemas and increased throughput for writing
data. Data must be regionally located close to each hospital, and reads must display be the most recent
committed version of an item.
Reduce the amount of time it takes to add data from new hospitals to Health Interface.
Support a more scalable batch processing solution in Azure.
Reduce the amount of development effort to rewrite existing SQL queries.

Health Insights Requirements

ADatum identifies the following requirements for the Health Insights application:

The analysis of events must be performed over time by using an organizational date dimension table.
The data from Health Interface and Health Review must be available in Health Insights within 15 minutes of
being committed.

62D227AA5C77F5C766AC37B5740F344D
The new Health Insights application must be built on a massively parallel processing (MPP) architecture
that will support the high performance of joins on large fact tables.

QUESTION 1
You need to recommend a security solution that meets the requirements of Health Review.

What should you include in the recommendation?

A. dynamic data masking


B. Transport Layer Security (TLS)
C. Always Encrypted
D. row-level security

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Must ensure that sensitive health data is encrypted at rest and in transit.

Always Encrypted is a feature designed to protect sensitive data stored in Azure SQL Database or SQL Server
databases. Always Encrypted allows clients to encrypt sensitive data inside client applications and never reveal
the encryption keys to the database engine (SQL Database or SQL Server).

Reference:
https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest

https://docs.microsoft.com/en-us/azure/security/fundamentals/database-security-overview

QUESTION 2
You need to recommend a solution to quickly identify all the columns in Health Review that contain sensitive
health data.

What should you include in the recommendation?

A. Data Discovery and Classifications


B. data masking
C. SQL Server auditing
D. Azure tags

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Data Discovery & Classification introduces a set of advanced capabilities aimed at protecting data and not just
the data warehouse itself. Classification/Labeling – Sensitivity classification labels tagged on the columns can
be persisted in the data warehouse itself.

Reference:
https://azure.microsoft.com/sv-se/blog/announcing-public-preview-of-data-discovery-classification-for-
microsoft-azure-sql-data-warehouse/

62D227AA5C77F5C766AC37B5740F344D
Design for data security and compliance

Testlet 4

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you
would like to complete each case. However, there may be additional case studies and sections on this
exam. You must manage your time to ensure that you are able to complete all questions included on this exam
in the time provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study

To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Overview

You are a data engineer for Trey Research. The company is close to completing a joint project with the
government to build smart highways infrastructure across North America. This involves the placement of
sensors and cameras to measure traffic flow, car speed, and vehicle details.

You have been asked to design a cloud solution that will meet the business and technical requirements of the
smart highway.

Solution components

Telemetry Capture

The telemetry capture system records each time a vehicle passes in front of a sensor. The sensors run on a
custom embedded operating system and record the following telemetry data:

Time
Location in latitude and longitude
Speed in kilometers per hour (kmph)
Length of vehicle in meters

Visual Monitoring

The visual monitoring system is a network of approximately 1,000 cameras placed near highways that capture
images of vehicle traffic every 2 seconds. The cameras record high resolution images. Each image is
approximately 3 MB in size.

Requirements. Business

The company identifies the following business requirements:

External vendors must be able to perform custom analysis of data using machine learning technologies.

62D227AA5C77F5C766AC37B5740F344D
You must display a dashboard on the operations status page that displays the following metrics: telemetry,
volume, and processing latency.
Traffic data must be made available to the Government Planning Department for the purpose of modeling
changes to the highway system. The traffic data will be used in conjunction with other data such as
information about events such as sporting events, weather conditions, and population statistics. External
data used during the modeling is stored in on-premises SQL Server 2016 databases and CSV files stored
in an Azure Data Lake Storage Gen2 storage account.
Information about vehicles that have been detected as going over the speed limit during the last 30 minutes
must be available to law enforcement officers. Several law enforcement organizations may respond to
speeding vehicles.
The solution must allow for searches of vehicle images by license plate to support law enforcement
investigations. Searches must be able to be performed using a query language and must support fuzzy
searches to compensate for license plate detection errors.

Requirements. Security

The solution must meet the following security requirements:

External vendors must not have direct access to sensor data or images.
Images produced by the vehicle monitoring solution must be deleted after one month. You must minimize
costs associated with deleting images from the data store.
Unauthorized usage of data must be detected in real time. Unauthorized usage is determined by looking for
unusual usage patterns.
All changes to Azure resources used by the solution must be recorded and stored. Data must be provided
to the security team for incident response purposes.

Requirements. Sensor data

You must write all telemetry data to the closest Azure region. The sensors used for the telemetry capture
system have a small amount of memory available and so must write data as quickly as possible to avoid losing
telemetry data.

QUESTION 1
You need to design the unauthorized data usage detection system.

What Azure service should you include in the design?

A. Azure Analysis Services


B. Azure Synapse Analytics
C. Azure Databricks
D. Azure Data Factory

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
SQL Database and SQL Data Warehouse
SQL threat detection identifies anomalous activities indicating unusual and potentially harmful attempts to
access or exploit databases.

Advanced Threat Protection for Azure SQL Database and SQL Data Warehouse detects anomalous activities
indicating unusual and potentially harmful attempts to access or exploit databases.

Scenario:
Requirements. Security
The solution must meet the following security requirements:
Unauthorized usage of data must be detected in real time. Unauthorized usage is determined by looking for

62D227AA5C77F5C766AC37B5740F344D
unusual usage patterns.

Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-threat-detection-overview

62D227AA5C77F5C766AC37B5740F344D
Design for data security and compliance

Testlet 5

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Background

Trey Research is a technology innovator. The company partners with regional transportation department office
to build solutions that improve traffic flow and safety.

The company is developing the following solutions:

Regional transportation departments installed traffic sensor systems on major highways across North America.
Sensors record the following information each time a vehicle passes in front of a sensor:

62D227AA5C77F5C766AC37B5740F344D
Time
Location in latitude and longitude
Speed in kilometers per second (kmps)
License plate number
Length of vehicle in meters

Sensors provide data by using the following structure:

Traffic sensors will occasionally capture an image of a vehicle for debugging purposes.
You must optimize performance of saving/storing vehicle images.

Traffic sensor data

Sensors must have permission only to add items to the SensorData collection.
Traffic data insertion rate must be maximized.
Once every three months all traffic sensor data must be analyzed to look for data patterns that indicate
sensor malfunctions.
Sensor data must be stored in a Cosmos DB named treydata in a collection named SensorData
The impact of vehicle images on sensor data throughout must be minimized.

Backtrack

This solution reports on all data related to a specific vehicle license plate. The report must use data from the
SensorData collection. Users must be able to filter vehicle data in the following ways:

vehicles on a specific road


vehicles driving above the speed limit

Planning Assistance

Data used for Planning Assistance must be stored in a sharded Azure SQL Database.

Data from the Sensor Data collection will automatically be loaded into the Planning Assistance database once
a week by using Azure Data Factory. You must be able to manually trigger the data load process.

Privacy and security policy

Azure Active Directory must be used for all services where it is available.
For privacy reasons, license plate number information must not be accessible in Planning Assistance.

62D227AA5C77F5C766AC37B5740F344D
Unauthorized usage of the Planning Assistance data must be detected as quickly as possible. Unauthorized
usage is determined by looking for an unusual pattern of usage.
Data must only be stored for seven years.

Performance and availability

The report for Backtrack must execute as quickly as possible.


The SLA for Planning Assistance is 70 percent, and multiday outages are permitted.
All data must be replicated to multiple geographic regions to prevent data loss.
You must maximize the performance of the Real Time Response system.

Financial requirements

Azure resource costs must be minimized where possible.

QUESTION 1
HOTSPOT

You need to design the authentication and authorization methods for sensors.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Sensor data must be stored in a Cosmos DB named treydata in a collection named SensorData
Sensors must have permission only to add items to the SensorData collection

Box 1: Resource Token


Resource tokens provide access to the application resources within a Cosmos DB database.
Enable clients to read, write, and delete resources in the Cosmos DB account according to the permissions
they've been granted.

Box 2: Cosmos DB user


You can use a resource token (by creating Cosmos DB users and permissions) when you want to provide
access to resources in your Cosmos DB account to a client that cannot be trusted with the master key.

Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/secure-access-to-data

QUESTION 2
HOTSPOT

You need to ensure that security policies for the unauthorized detection system are met.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

62D227AA5C77F5C766AC37B5740F344D
Hot Area:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Box 1: Blob storage


Configure blob storage for audit logs.

Scenario: Unauthorized usage of the Planning Assistance data must be detected as quickly as possible.
Unauthorized usage is determined by looking for an unusual pattern of usage.
Data used for Planning Assistance must be stored in a sharded Azure SQL Database.

Box 2: Web Apps


SQL Advanced Threat Protection (ATP) is to be used.
One of Azure’s most popular service is App Service which enables customers to build and host web
applications in the programming language of their choice without managing infrastructure. App Service offers
auto-scaling and high availability, supports both Windows and Linux. It also supports automated deployments
from GitHub, Visual Studio Team Services or any Git repository. At RSA, we announced that Azure Security
Center leverages the scale of the cloud to identify attacks targeting App Service applications.

Reference:
https://azure.microsoft.com/sv-se/blog/azure-security-center-can-identify-attacks-targeting-azure-app-service-
applications/

62D227AA5C77F5C766AC37B5740F344D
Design for data security and compliance

Testlet 6

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Overview

You develop data engineering solutions for Graphics Design Institute, a global media company with offices in
New York City, Manchester, Singapore, and Melbourne.

The New York office hosts SQL Server databases that stores massive amounts of customer data. The
company also stores millions of images on a physical server located in the New York office. More than 2 TB of
image data is added each day. The images are transferred from customer devices to the server in New York.

Many images have been placed on this server in an unorganized manner, making it difficult for editors to
search images. Images should automatically have object and color tags generated. The tags must be stored in
a document database, and be queried by SQL.

You are hired to design a solution that can store, transform, and visualize customer data.

Requirements

Business

The company identifies the following business requirements:

You must transfer all images and customer data to cloud storage and remove on-premises servers.
You must develop an analytical processing solution for transforming customer data.
You must develop an image object and color tagging solution.
Capital expenditures must be minimized.
Cloud resource costs must be minimized.

Technical

The solution has the following technical requirements:

Tagging data must be uploaded to the cloud from the New York office location.

62D227AA5C77F5C766AC37B5740F344D
Tagging data must be replicated to regions that are geographically close to company office locations.
Image data must be stored in a single data store at minimum cost.
Customer data must be analyzed using managed Spark clusters.
Power BI must be used to visualize transformed customer data.
All data must be backed up in case disaster recovery is required.

Security and optimization

All cloud data must be encrypted at rest and in transit. The solution must support:

parallel processing of customer data


hyper-scale storage of images
global region data replication of processed image data

QUESTION 1
DRAG DROP

You need to design the encryption strategy for the tagging data and customer data.

What should you recommend? To answer, drag the appropriate setting to the correct drop targets. Each
source may be used once, more than once, or not at all. You may need to drag the split bar between panes or
scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

Correct Answer:

Section: (none)
Explanation

Explanation/Reference:

62D227AA5C77F5C766AC37B5740F344D
Explanation:

All cloud data must be encrypted at rest and in transit.

Box 1: Transparent data encryption


Encryption of the database file is performed at the page level. The pages in an encrypted database are
encrypted before they are written to disk and decrypted when read into memory.

Box 2: Encryption at rest


Encryption at Rest is the encoding (encryption) of data when it is persisted.

Reference:
https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/transparent-data-encryption?
view=sql-server-2017

https://docs.microsoft.com/en-us/azure/security/azure-security-encryption-atrest

62D227AA5C77F5C766AC37B5740F344D
Design for data security and compliance

Question Set 7

QUESTION 1
You are designing security for administrative access to Azure Synapse Analytics.

You need to recommend a solution to ensure that administrators use two-factor authentication when accessing
the data warehouse from Microsoft SQL Server Management Studio (SSMS).

What should you include in the recommendation?

A. Azure conditional access policies


B. Azure Active Directory (Azure AD) Privileged Identity Management (PIM)
C. Azure Key Vault secrets
D. Azure Active Directory (Azure AD) Identity Protection

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-conditional-access

QUESTION 2
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You have an Azure SQL database that has columns. The columns contain sensitive Personally Identifiable
Information (PII) data.

You need to design a solution that tracks and stores all the queries executed against the PII data. You must be
able to review the data in Azure Monitor, and the data must be available for at least 45 days.

Solution: You add classifications to the columns that contain sensitive data. You turn on Auditing and set the
audit log destination to use Azure Log Analytics.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
The default retention for Log Analytics is 31 days only. The Log Analytics retention settings allow you to
configure a minimum of 31 days (if not using a free tier) up to 730 days.

You would need to reconfigure to at least 45 days, or, for example, use Azure Blob Storage as destination.

62D227AA5C77F5C766AC37B5740F344D
Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-auditing

https://blogs.msdn.microsoft.com/canberrapfe/2017/01/25/change-oms-log-analytics-retention-period-in-the-
azure-portal/

QUESTION 3
You have an Azure Storage account.

You plan to copy one million image files to the storage account.

You plan to share the files with an external partner organization. The partner organization will analyze the files
during the next year.

You need to recommend an external access solution for the storage account. The solution must meet the
following requirements:

Ensure that only the partner organization can access the storage account.
Ensure that access of the partner organization is removed automatically after 365 days.

What should you include in the recommendation?

A. shared keys
B. Azure Blob storage lifecycle management policies
C. Azure policies
D. shared access signature (SAS)

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Explanation:
A shared access signature (SAS) is a URI that grants restricted access rights to Azure Storage resources. You
can provide a shared access signature to clients who should not be trusted with your storage account key but
to whom you wish to delegate access to certain storage account resources. By distributing a shared access
signature URI to these clients, you can grant them access to a resource for a specified period of time, with a
specified set of permissions.

Reference:
https://docs.microsoft.com/en-us/rest/api/storageservices/delegate-access-with-shared-access-signature

QUESTION 4
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You have an Azure SQL database that has columns. The columns contain sensitive Personally Identifiable
Information (PII) data.

You need to design a solution that tracks and stores all the queries executed against the PII data. You must be
able to review the data in Azure Monitor, and the data must be available for at least 45 days.

Solution: You execute a daily stored procedure that retrieves queries from Query Store, looks up the column
classifications, and stores the results in a new table in the database.

62D227AA5C77F5C766AC37B5740F344D
Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Instead add classifications to the columns that contain sensitive data and turn on Auditing.

Note: Auditing has been enhanced to log sensitivity classifications or labels of the actual data that were
returned by the query. This would enable you to gain insights on who is accessing sensitive data.

Reference:
https://azure.microsoft.com/en-us/blog/announcing-public-preview-of-data-discovery-classification-for-
microsoft-azure-sql-data-warehouse/

QUESTION 5
A company stores sensitive information about customers and employees in Azure SQL Database.

You need to ensure that the sensitive data remains encrypted in transit and at rest.

What should you recommend?

A. Transparent Data Encryption


B. Always Encrypted with secure enclaves
C. Azure Disk Encryption
D. SQL Server AlwaysOn

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Incorrect Answers:
A: Transparent Data Encryption (TDE) encrypts SQL Server, Azure SQL Database, and Azure Synapse
Analytics data files, known as encrypting data at rest. TDE does not provide encryption across communication
channels.

Reference:
https://cloudblogs.microsoft.com/sqlserver/2018/12/17/confidential-computing-using-always-encrypted-with-
secure-enclaves-in-sql-server-2019-preview/

QUESTION 6
DRAG DROP

You are designing a data warehouse in Azure Synapse Analytics for a financial services company. Azure
Active Directory will be used to authenticate the users.

You need to ensure that the following security requirements are met:

Department managers must be able to create new database.


The IT department must assign users to databases.
Permissions granted must be minimized.

62D227AA5C77F5C766AC37B5740F344D
Which role memberships should you recommend? To answer, drag the appropriate roles to the correct groups.
Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes
or scroll to view content.

NOTE: Each correct selection is worth one point.

Select and Place:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Box 1: dbmanager
Members of the dbmanager role can create new databases.

Box 2: db_accessadmin
Members of the db_accessadmin fixed database role can add or remove access to the database for Windows
logins, Windows groups, and SQL Server logins.

Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-manage-logins

QUESTION 7
You plan to use Azure SQL Database to support a line of business app.

You need to identify sensitive data that is stored in the database and monitor access to the data.

Which three actions should you recommend? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Configure Data Discovery and Classification.


B. Implement Transparent Data Encryption (TDE).
C. Enable Auditing.
D. Run Vulnerability Assessment.

62D227AA5C77F5C766AC37B5740F344D
E. Use Advanced Threat Protection.

Correct Answer: ACE


Section: (none)
Explanation

Explanation/Reference:
Explanation:
A: Data Discovery & Classification is built into Azure SQL Database, Azure SQL Managed Instance, and Azure
Synapse Analytics. It provides advanced capabilities for discovering, classifying, labeling, and reporting the
sensitive data in your databases.

C: An important aspect of the information-protection paradigm is the ability to monitor access to sensitive data.
Azure SQL Auditing has been enhanced to include a new field in the audit log called
data_sensitivity_information. This field logs the sensitivity classifications (labels) of the data that was returned
by a query.

E: Data Discovery & Classification is part of the Advanced Data Security offering, which is a unified package for
advanced Azure SQL security capabilities. You can access and manage Data Discovery & Classification via
the central SQL Advanced Data Security section of the Azure portal.

Reference: https://docs.microsoft.com/en-us/azure/azure-sql/database/data-discovery-and-classification-
overview

QUESTION 8
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You have an Azure SQL database that has columns. The columns contain sensitive Personally Identifiable
Information (PII) data.

You need to design a solution that tracks and stores all the queries executed against the PII data. You must be
able to review the data in Azure Monitor, and the data must be available for at least 45 days.

Solution: You create a SELECT trigger on the table in SQL Database that writes the query to a new table in the
database, and then executes a stored procedure that looks up the column classifications and joins to the query
text.

Does this meet the goal?

A. Yes
B. No

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Instead add classifications to the columns that contain sensitive data and turn on Auditing.

Note: Auditing has been enhanced to log sensitivity classifications or labels of the actual data that were
returned by the query. This would enable you to gain insights on who is accessing sensitive data.

Reference:

62D227AA5C77F5C766AC37B5740F344D
https://azure.microsoft.com/en-us/blog/announcing-public-preview-of-data-discovery-classification-for-
microsoft-azure-sql-data-warehouse/

QUESTION 9
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

You have an Azure SQL database that has columns. The columns contain sensitive Personally Identifiable
Information (PII) data.

You need to design a solution that tracks and stores all the queries executed against the PII data. You must be
able to review the data in Azure Monitor, and the data must be available for at least 45 days.

Solution: You add classifications to the columns that contain sensitive data. You turn on Auditing and set the
audit log destination to use Azure Blob storage.

Does this meet the goal?

A. Yes
B. No

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Auditing has been enhanced to log sensitivity classifications or labels of the actual data that were returned by
the query. This would enable you to gain insights on who is accessing sensitive data.

Note: You now have multiple options for configuring where audit logs will be written. You can write logs to an
Azure storage account, to a Log Analytics workspace for consumption by Azure Monitor logs, or to event hub
for consumption using event hub. You can configure any combination of these options, and audit logs will be
written to each.

Reference:
https://azure.microsoft.com/en-us/blog/announcing-public-preview-of-data-discovery-classification-for-
microsoft-azure-sql-data-warehouse/

QUESTION 10
You have an Azure Data Lake Storage account that has a virtual network service endpoint configured.

You plan to use Azure Data Factory to extract data from the Data Lake Storage account. The data will then be
loaded to a data warehouse in Azure Synapse Analytics by using PolyBase.

Which authentication method should you use to access Data Lake Storage?

A. shared access key authentication


B. managed identity authentication
C. account key authentication
D. service principal authentication

Correct Answer: B
Section: (none)

62D227AA5C77F5C766AC37B5740F344D
Explanation

Explanation/Reference:
Reference:
https://docs.microsoft.com/en-us/azure/data-factory/connector-azure-sql-data-warehouse#use-polybase-to-
load-data-into-azure-sql-data-warehouse

QUESTION 11
HOTSPOT

A company plans to use Azure SQL Database to support a line of business application. The application will
manage sensitive employee data.

The solution must meet the following requirements:

Encryption must be performed by the application.


Only the client application must have access keys for encrypting and decrypting data.
Data must never appear as plain text in the database.
The strongest possible encryption method must be used.
Searching must be possible on selected data.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Box 1: Always Encrypted with deterministic encryption


Deterministic encryption always generates the same encrypted value for any given plain text value. Using
deterministic encryption allows point lookups, equality joins, grouping and indexing on encrypted columns.
However, it may also allow unauthorized users to guess information about encrypted values by examining
patterns in the encrypted column, especially if there is a small set of possible encrypted values, such as True/
False, or North/South/East/West region. Deterministic encryption must use a column collation with a binary2
sort order for character columns.

Box 2: Always Encrypted with Randomized encryption


Randomized encryption uses a method that encrypts data in a less predictable manner. Randomized
encryption is more secure, but prevents searching, grouping, indexing, and joining on encrypted columns.

Note: With Always Encrypted the Database Engine never operates on plaintext data stored in encrypted
columns, but it still supports some queries on encrypted data, depending on the encryption type for the column.
Always Encrypted supports two types of encryption: randomized encryption and deterministic encryption.
Use deterministic encryption for columns that will be used as search or grouping parameters, for example a
government ID number. Use randomized encryption, for data such as confidential investigation comments,
which are not grouped with other records and are not used to join tables.

Reference:
https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted-database-
engine

QUESTION 12
You need to recommend a security solution for containers in Azure Blob storage. The solution must ensure that
only read permissions are granted to a specific user for a specific container.

62D227AA5C77F5C766AC37B5740F344D
What should you include in the recommendation?

A. shared access signatures (SAS)


B. an RBAC role in Azure Active Directory (Azure AD)
C. public read access for blobs only
D. access keys

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
You can delegate access to read, write, and delete operations on blob containers, tables, queues, and file
shares that are not permitted with a service SAS.

Note: A shared access signature (SAS) provides secure delegated access to resources in your storage
account without compromising the security of your data. With a SAS, you have granular control over how a
client can access your data. You can control what resources the client may access, what permissions they
have on those resources, and how long the SAS is valid, among other parameters.

Incorrect Answers:
C: You can enable anonymous, public read access to a container and its blobs in Azure Blob storage. By doing
so, you can grant read-only access to these resources without sharing your account key, and without requiring
a shared access signature (SAS).

Public read access is best for scenarios where you want certain blobs to always be available for anonymous
read access.

Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview

QUESTION 13
You are designing the security for an Azure SQL database.

You have an Azure Active Directory (Azure AD) group named Group1.

You need to recommend a solution to provide Group1 with read access to the database only.

What should you include in the recommendation?

A. a contained database user


B. a SQL login
C. an RBAC role
D. a shared access signature (SAS)

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Create a User for a security group
A best practice for managing your database is to use Windows security groups to manage user access. That
way you can simply manage the customer at the Security Group level in Active Directory granting appropriate
permissions. To add a security group to SQL Data Warehouse, you use the Display Name of the security group
as the principal in the CREATE USER statement.

62D227AA5C77F5C766AC37B5740F344D
CREATE USER [<Security Group Display Name>] FROM EXTERNAL PROVIDER WITH DEFAULT_SCHEMA
= [<schema>];

In our AD instance, we have a security group called Sales Team with an alias of salesteam@company.com. To
add this security group to SQL Data Warehouse you simply run the following statement:

CREATE USER [Sales Team] FROM EXTERNAL PROVIDER WITH DEFAULT_SCHEMA = [sales];

Reference:
https://blogs.msdn.microsoft.com/sqldw/2017/07/28/adding-ad-users-and-security-groups-to-azure-sql-data-
warehouse/

QUESTION 14
HOTSPOT

You use Azure Data Lake Storage Gen2 to store data that data scientists and data engineers will query by
using Azure Databricks interactive notebooks. The folders in Data Lake Storage will be secured, and users will
have access only to the folders that relate to the projects on which they work.

You need to recommend which authentication methods to use for Databricks and Data Lake Storage to provide
the users with the appropriate access. The solution must minimize administrative effort and development effort.

Which authentication method should you recommend for each Azure service? To answer, select the
appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Databricks: Personal access tokens


To authenticate and access Databricks REST APIs, you use personal access tokens. Tokens are similar to
passwords; you should treat them with care. Tokens expire and can be revoked.

Data Lake Storage: Azure Active Directory


Azure Data Lake Storage Gen1 uses Azure Active Directory for authentication.

References:
https://docs.azuredatabricks.net/dev-tools/api/latest/authentication.html

https://docs.microsoft.com/en-us/azure/data-lake-store/data-lakes-store-authentication-using-azure-active-
directory

QUESTION 15
You store data in a data warehouse in Azure Synapse Analytics.

You need to design a solution to ensure that the data warehouse and the most current data is available within
one hour of a datacenter failure.

Which three actions should you include in the design? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Each day, restore the data warehouse from a geo-redundant backup to an available Azure region.
B. If a failure occurs, update the connection strings to point to the recovered data warehouse.
C. If a failure occurs, modify the Azure Firewall rules of the data warehouse.
D. Each day, create Azure Firewall rules that allow access to the restored data warehouse.

62D227AA5C77F5C766AC37B5740F344D
E. Each day, restore the data warehouse from a user-defined restore point to an available Azure region.

Correct Answer: BDE


Section: (none)
Explanation

Explanation/Reference:
Explanation:
E: You can create a user-defined restore point and restore from the newly created restore point to a new data
warehouse in a different region.

Note: A data warehouse snapshot creates a restore point you can leverage to recover or copy your data
warehouse to a previous state.

A data warehouse restore is a new data warehouse that is created from a restore point of an existing or
deleted data warehouse. On average within the same region, restore rates typically take around 20 minutes.

Incorrect Answers:
A: SQL Data Warehouse performs a geo-backup once per day to a paired data center. The RPO for a geo-
restore is 24 hours. You can restore the geo-backup to a server in any other region where SQL Data
Warehouse is supported. A geo-backup ensures you can restore data warehouse in case you cannot access
the restore points in your primary region.

Reference:
https://docs.microsoft.com/en-us/azure/sql-data-warehouse/backup-and-restore

QUESTION 16
You are planning a big data solution in Azure.

You need to recommend a technology that meets the following requirements:

Be optimized for batch processing.


Support autoscaling.
Support per-cluster scaling.

Which technology should you recommend?

A. Azure Synapse Analytics


B. Azure HDInsight with Spark
C. Azure Analysis Services
D. Azure Databricks

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Azure Databricks is an Apache Spark-based analytics platform. Azure Databricks supports autoscaling and
manages the Spark cluster for you.

Incorrect Answers:
A, B:

62D227AA5C77F5C766AC37B5740F344D
QUESTION 17
You are designing an enterprise data warehouse in Azure Synapse Analytics that will contain a table named
Customers. Customers will contain credit card information.

You need to recommend a solution to provide salespeople with the ability to view all the entries in Customers.
The solution must prevent all the salespeople from viewing or inferring the credit card information.

What should you include in the recommendation?

A. row-level security
B. data masking
C. column-level security
D. Always Encrypted

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
SQL Database dynamic data masking limits sensitive data exposure by masking it to non-privileged users.

The Credit card masking method exposes the last four digits of the designated fields and adds a constant
string as a prefix in the form of a credit card.

Example: XXXX-XXXX-XXXX-1234

Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-dynamic-data-masking-get-started

QUESTION 18
HOTSPOT

A company plans to use Azure SQL Database to support a line of business application. The application will
manage sensitive employee data.

The solution must meet the following requirements:

Encryption must be performed by the application.


Only the client application must have access keys for encrypting and decrypting data.
Data must never appear as plain text in the database.
The strongest possible encryption method must be used.
Grouping must be possible on selected data.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

62D227AA5C77F5C766AC37B5740F344D
Hot Area:

Correct Answer:

Section: (none)
Explanation

62D227AA5C77F5C766AC37B5740F344D
Explanation/Reference:
Explanation:

Box 1: Always Encrypted with deterministic encryption


Deterministic encryption always generates the same encrypted value for any given plain text value. Using
deterministic encryption allows point lookups, equality joins, grouping and indexing on encrypted columns.
However, it may also allow unauthorized users to guess information about encrypted values by examining
patterns in the encrypted column, especially if there is a small set of possible encrypted values, such as True/
False, or North/South/East/West region. Deterministic encryption must use a column collation with a binary2
sort order for character columns.

Box 2: Always Encrypted with Randomized encryption


Randomized encryption uses a method that encrypts data in a less predictable manner. Randomized
encryption is more secure, but prevents searching, grouping, indexing, and joining on encrypted columns.

Note: With Always Encrypted the Database Engine never operates on plaintext data stored in encrypted
columns, but it still supports some queries on encrypted data, depending on the encryption type for the column.
Always Encrypted supports two types of encryption: randomized encryption and deterministic encryption.
Use deterministic encryption for columns that will be used as search or grouping parameters, for example a
government ID number. Use randomized encryption, for data such as confidential investigation comments,
which are not grouped with other records and are not used to join tables.

Reference:
https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted-database-
engine

QUESTION 19
HOTSPOT

You are designing the security for a mission critical Azure SQL database named DB1. DB1 contains several
columns that store Personally Identifiable Information (PII) data

You need to recommend a security solution that meets the following requirements:

Ensures that DB1 is encrypted at rest


Ensures that data from the columns containing PII data is encrypted in transit

Which security solution should you recommend for DB1 and the columns? To answer, select the appropriate
options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

Section: (none)

62D227AA5C77F5C766AC37B5740F344D
Explanation

Explanation/Reference:
Explanation:

DB1: Transparent Data Encryption


Azure SQL Database currently supports encryption at rest for Microsoft-managed service side and client-side
encryption scenarios.

Support for server encryption is currently provided through the SQL feature called Transparent Data
Encryption.

Columns: Always encrypted


Always Encrypted is a feature designed to protect sensitive data stored in Azure SQL Database or SQL Server
databases. Always Encrypted allows clients to encrypt sensitive data inside client applications and never reveal
the encryption keys to the database engine (SQL Database or SQL Server).

Note: Most data breaches involve the theft of critical data such as credit card numbers or personally identifiable
information. Databases can be treasure troves of sensitive information. They can contain customers' personal
data (like national identification numbers), confidential competitive information, and intellectual property. Lost or
stolen data, especially customer data, can result in brand damage, competitive disadvantage, and serious
fines--even lawsuits.

Reference:
https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-atrest

https://docs.microsoft.com/en-us/azure/security/fundamentals/database-security-overview

QUESTION 20
You are developing an application that uses Azure Data Lake Storage Gen 2.

You need to recommend a solution to grant permissions to a specific application for a limited time period.

What should you include in the recommendation?

A. Azure Active Directory (Azure AD) identities


B. shared access signatures (SAS)
C. account keys
D. role assignments

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
A shared access signature (SAS) is a URI that grants restricted access rights to Azure Storage resources. You
can provide a shared access signature to clients who should not be trusted with your storage account key but
to whom you wish to delegate access to certain storage account resources. By distributing a shared access
signature URI to these clients, you can grant them access to a resource for a specified period of time, with a
specified set of permissions.

Reference:
https://docs.microsoft.com/en-us/rest/api/storageservices/delegate-access-with-shared-access-signature

QUESTION 21
You need to recommend a security solution to grant anonymous users permission to access the blobs in a
specific container only.

62D227AA5C77F5C766AC37B5740F344D
What should you include in the recommendation?

A. access keys for the storage account


B. shared access signatures (SAS)
C. Role assignments
D. the public access level for the container

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Explanation:
You can enable anonymous, public read access to a container and its blobs in Azure Blob storage. By doing
so, you can grant read-only access to these resources without sharing your account key, and without requiring
a shared access signature (SAS).

Public read access is best for scenarios where you want certain blobs to always be available for anonymous
read access.

Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-manage-access-to-resources

QUESTION 22
You are designing a solution that will use Azure Databricks and Azure Data Lake Storage Gen2.

From Databricks, you need to access Data Lake Storage directly by using a service principal.

What should you include in the solution?

A. shared access signatures (SAS) in Data Lake Storage


B. access keys in Data Lake Storage
C. an organizational relationship in Azure Active Directory (Azure AD)
D. an application registration in Azure Active Directory (Azure AD)

Correct Answer: D
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Create and grant permissions to service principal
If your selected the access method requires a service principal with adequate permissions, and you do not
have one, follow these steps:

1. Create an Azure AD application and service principal that can access resources. Note the following
properties:
client-id: An ID that uniquely identifies the application.
directory-id: An ID that uniquely identifies the Azure AD instance.
service-credential: A string that the application uses to prove its identity.
2. Register the service principal, granting the correct role assignment, such as Storage Blob Data
3. Contributor, on the Azure Data Lake Storage Gen2 account.

Reference:
https://docs.databricks.com/data/data-sources/azure/azure-datalake-gen2.html

62D227AA5C77F5C766AC37B5740F344D
Design for high availability and disaster recovery

Testlet 1

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Overview

Litware, Inc. owns and operates 300 convenience stores across the US. The company sells a variety of
packaged foods and drinks, as well as a variety of prepared foods, such as sandwiches and pizzas.

Litware has a loyalty club whereby members can get daily discounts on specific items by providing their
membership number at checkout.

Litware employs business analysts who prefer to analyze data by using Microsoft Power BI, and data scientists
who prefer analyzing data in Azure Databricks notebooks.

Requirements. Business Goals

Litware wants to create a new analytics environment in Azure to meet the following requirements:

See inventory levels across the stores. Data must be updated as close to real time as possible.
Execute ad hoc analytical queries on historical data to identify whether the loyalty club discounts increase
sales of the discounted products.
Every four hours, notify store employees about how many prepared food items to produce based on
historical demand from the sales data.

Requirements. Technical Requirements

Litware identifies the following technical requirements:

Minimize the number of different Azure services needed to achieve the business goals.
Use platform as a service (PaaS) offerings whenever possible and avoid having to provision virtual
machines that must be managed by Litware.
Ensure that the analytical data store is accessible only to the company’s on-premises network and Azure
services.
Use Azure Active Directory (Azure AD) authentication whenever possible.
Use the principle of least privilege when designing security.

62D227AA5C77F5C766AC37B5740F344D
Stage inventory data in Azure Data Lake Storage Gen2 before loading the data into the analytical data
store. Litware wants to remove transient data from Data Lake Storage once the data is no longer in use.
Files that have a modified date that is older than 14 days must be removed.
Limit the business analysts’ access to customer contact information, such as phone numbers, because this
type of data is not analytically relevant.
Ensure that you can quickly restore a copy of the analytical data store within one hour in the event of
corruption or accidental deletion.

Requirements. Planned Environment

Litware plans to implement the following environment:

The application development team will create an Azure event hub to receive real-time sales data, including
store number, date, time, product ID, customer loyalty number, price, and discount amount, from the point
of sale (POS) system and output the data to data storage in Azure.
Customer data, including name, contact information, and loyalty number, comes from Salesforce, a SaaS
application, and can be imported into Azure once every eight hours. Row modified dates are not trusted in
the source table.
Product data, including product ID, name, and category, comes from Salesforce and can be imported into
Azure once every eight hours. Row modified dates are not trusted in the source table.
Daily inventory data comes from a Microsoft SQL server located on a private network.
Litware currently has 5 TB of historical sales data and 100 GB of customer data. The company expects
approximately 100 GB of new data per month for the next year.
Litware will build a custom application named FoodPrep to provide store employees with the calculation
results of how many prepared food items to produce every four hours.
Litware does not plan to implement Azure ExpressRoute or a VPN between the on-premises network and
Azure.

QUESTION 1
What should you do to improve high availability of the real-time data processing solution?

A. Deploy identical Azure Stream Analytics jobs to paired regions in Azure.


B. Deploy a High Concurrency Databricks cluster.
C. Deploy an Azure Stream Analytics job and use an Azure Automation runbook to check the status of the job
and to start the job if it stops.
D. Set Data Lake Storage to use geo-redundant storage (GRS).

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Guarantee Stream Analytics job reliability during service updates
Part of being a fully managed service is the capability to introduce new service functionality and improvements
at a rapid pace. As a result, Stream Analytics can have a service update deploy on a weekly (or more frequent)
basis. No matter how much testing is done there is still a risk that an existing, running job may break due to the
introduction of a bug. If you are running mission critical jobs, these risks need to be avoided. You can reduce
this risk by following Azure’s paired region model.

Scenario: The application development team will create an Azure event hub to receive real-time sales data,
including store number, date, time, product ID, customer loyalty number, price, and discount amount, from the
point of sale (POS) system and output the data to data storage in Azure

Reference:
https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-job-reliability

62D227AA5C77F5C766AC37B5740F344D
Design for high availability and disaster recovery

Testlet 2

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Overview

You develop data engineering solutions for Graphics Design Institute, a global media company with offices in
New York City, Manchester, Singapore, and Melbourne.

The New York office hosts SQL Server databases that stores massive amounts of customer data. The
company also stores millions of images on a physical server located in the New York office. More than 2 TB of
image data is added each day. The images are transferred from customer devices to the server in New York.

Many images have been placed on this server in an unorganized manner, making it difficult for editors to
search images. Images should automatically have object and color tags generated. The tags must be stored in
a document database, and be queried by SQL.

You are hired to design a solution that can store, transform, and visualize customer data.

Requirements

Business

The company identifies the following business requirements:

You must transfer all images and customer data to cloud storage and remove on-premises servers.
You must develop an analytical processing solution for transforming customer data.
You must develop an image object and color tagging solution.
Capital expenditures must be minimized.
Cloud resource costs must be minimized.

Technical

The solution has the following technical requirements:

Tagging data must be uploaded to the cloud from the New York office location.

62D227AA5C77F5C766AC37B5740F344D
Tagging data must be replicated to regions that are geographically close to company office locations.
Image data must be stored in a single data store at minimum cost.
Customer data must be analyzed using managed Spark clusters.
Power BI must be used to visualize transformed customer data.
All data must be backed up in case disaster recovery is required.

Security and optimization

All cloud data must be encrypted at rest and in transit. The solution must support:

parallel processing of customer data


hyper-scale storage of images
global region data replication of processed image data

QUESTION 1
You need to design a backup solution for the processed customer data.

What should you include in the design?

A. AzCopy
B. AdlCopy
C. Geo-Redundancy
D. Geo-Replication

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Scenario: All data must be backed up in case disaster recovery is required.

Geo-redundant storage (GRS) is designed to provide at least 99.99999999999999% (16 9's) durability of
objects over a given year by replicating your data to a secondary region that is hundreds of miles away from
the primary region. If your storage account has GRS enabled, then your data is durable even in the case of a
complete regional outage or a disaster in which the primary region isn't recoverable.

Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy-grs

QUESTION 2
You plan to use an enterprise data warehouse in Azure Synapse Analytics to store the customer data.

You need to recommend a disaster recovery solution for the data warehouse.

What should you include in the recommendation?

A. AzCopy
B. Read-only replicas
C. AdlCopy
D. Geo-Redundant backups

Correct Answer: D
Section: (none)
Explanation

62D227AA5C77F5C766AC37B5740F344D
Explanation/Reference:
Reference:
https://docs.microsoft.com/en-us/azure/sql-data-warehouse/backup-and-restore

62D227AA5C77F5C766AC37B5740F344D
Design for high availability and disaster recovery

Testlet 3

Case study

This is a case study. Case studies are not timed separately. You can use as much exam time as you would like
to complete each case. However, there may be additional case studies and sections on this exam. You must
manage your time to ensure that you are able to complete all questions included on this exam in the time
provided.

To answer the questions included in a case study, you will need to reference information that is provided in the
case study. Case studies might contain exhibits and other resources that provide more information about the
scenario that is described in the case study. Each question is independent of the other questions in this case
study.

At the end of this case study, a review screen will appear. This screen allows you to review your answers and
to make changes before you move to the next section of the exam. After you begin a new section, you cannot
return to this section.

To start the case study


To display the first question in this case study, click the Next button. Use the buttons in the left pane to explore
the content of the case study before you answer the questions. Clicking these buttons displays information
such as business requirements, existing environment, and problem statements. If the case study has an All
Information tab, note that the information displayed is identical to the information displayed on the subsequent
tabs. When you are ready to answer a question, click the Question button to return to the question.

Background

Current environment

The company has the following virtual machines (VMs):

Requirements

Storage and processing

You must be able to use a file system view of data stored in a blob.
You must build an architecture that will allow Contoso to use the DB FS filesystem layer over a blob store. The
architecture will need to support data files, libraries, and images. Additionally, it must provide a web-based
interface to documents that contain runnable command, visualizations, and narrative text such as a notebook.

CONT_SQL3 requires an initial scale of 35000 IOPS.


CONT_SQL1 and CONT_SQL2 must use the vCore model and should include replicas. The solution must
support 8000 IOPS.
The storage should be configured to optimized storage for database OLTP workloads.

62D227AA5C77F5C766AC37B5740F344D
Migration

You must be able to independently scale compute and storage resources.


You must migrate all SQL Server workloads to Azure. You must identify related machines in the on-
premises environment, get disk size data usage information.
Data from SQL Server must include zone redundant storage.
You need to ensure that app components can reside on-premises while interacting with components that
run in the Azure public cloud.
SAP data must remain on-premises.
The Azure Site Recovery (ASR) results should contain per-machine data.

Business requirements

You must design a regional disaster recovery topology.


The database backups have regulatory purposes and must be retained for seven years.
CONT_SQL1 stores customers sales data that requires ETL operations for data analysis. A solution is
required that reads data from SQL, performs ETL, and outputs to Power BI. The solution should use
managed clusters to minimize costs. To optimize logistics, Contoso needs to analyze customer sales data
to see if certain products are tied to specific times in the year.
The analytics solution for customer sales data must be available during a regional outage.

Security and auditing

Contoso requires all corporate computers to enable Windows Firewall.


Azure servers should be able to ping other Contoso Azure servers.
Employee PII must be encrypted in memory, in motion, and at rest. Any data encrypted by SQL Server must
support equality searches, grouping, indexing, and joining on the encrypted data.
Keys must be secured by using hardware security modules (HSMs).
CONT_SQL3 must not communicate over the default ports

Cost

All solutions must minimize cost and resources.


The organization does not want any unexpected charges.
The data engineers must set the SQL Data Warehouse compute resources to consume 300 DWUs.
CONT_SQL2 is not fully utilized during non-peak hours. You must minimize resource costs for during non-
peak hours.

QUESTION 1
You need to recommend a backup strategy for CONT_SQL1 and CONT_SQL2.

What should you recommend?

A. Use AzCopy and store the data in Azure.


B. Configure Azure SQL Database long-term retention for all databases.
C. Configure Accelerated Database Recovery.
D. Use DWLoader.

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Scenario: The database backups have regulatory purposes and must be retained for seven years.

QUESTION 2
You need to design the disaster recovery solution for customer sales data analytics.

62D227AA5C77F5C766AC37B5740F344D
Which three actions should you recommend? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Provision multiple Azure Databricks workspaces in separate Azure regions.


B. Migrate users, notebooks, and cluster configurations from one workspace to another in the same region.
C. Use zone redundant storage.
D. Migrate users, notebooks, and cluster configurations from one region to another.
E. Use Geo-redundant storage.
F. Provision a second Azure Databricks workspace in the same region.

Correct Answer: ADE


Section: (none)
Explanation

Explanation/Reference:
Explanation:
Scenario: The analytics solution for customer sales data must be available during a regional outage.

To create your own regional disaster recovery topology for databricks, follow these requirements:
1. Provision multiple Azure Databricks workspaces in separate Azure regions
2. Use Geo-redundant storage.
3. Once the secondary region is created, you must migrate the users, user folders, notebooks, cluster
configuration, jobs configuration, libraries, storage, init scripts, and reconfigure access control.

Note: Geo-redundant storage (GRS) is designed to provide at least 99.99999999999999% (16 9's) durability of
objects over a given year by replicating your data to a secondary region that is hundreds of miles away from
the primary region. If your storage account has GRS enabled, then your data is durable even in the case of a
complete regional outage or a disaster in which the primary region isn't recoverable.

Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy-grs

62D227AA5C77F5C766AC37B5740F344D
Design for high availability and disaster recovery

Question Set 4

QUESTION 1
HOTSPOT

You are designing a recovery strategy for your Azure SQL Databases.

The recovery strategy must use default automated backup settings. The solution must include a Point-in time
restore recovery strategy.

You need to recommend which backups to use and the order in which to restore backups.

What should you recommend? To answer, select the appropriate configuration in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

All Basic, Standard, and Premium databases are protected by automatic backups. Full backups are taken
every week, differential backups every day, and log backups every 5 minutes.

Reference:
https://azure.microsoft.com/sv-se/blog/azure-sql-database-point-in-time-restore/

QUESTION 2
You are developing a solution that performs real-time analysis of IoT data in the cloud.

The solution must remain available during Azure service updates.

You need to recommend a solution.

Which two actions should you recommend? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. Deploy an Azure Stream Analytics job to two separate regions that are not in a pair.
B. Deploy an Azure Stream Analytics job to each region in a paired region.
C. Monitor jobs in both regions for failure.
D. Monitor jobs in the primary region for failure.

62D227AA5C77F5C766AC37B5740F344D
E. Deploy an Azure Stream Analytics job to one region in a paired region.

Correct Answer: BC
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Stream Analytics guarantees jobs in paired regions are updated in separate batches. As a result there is a
sufficient time gap between the updates to identify potential breaking bugs and remediate them.
Customers are advised to deploy identical jobs to both paired regions.

In addition to Stream Analytics internal monitoring capabilities, customers are also advised to monitor the jobs
as if both are production jobs. If a break is identified to be a result of the Stream Analytics service update,
escalate appropriately and fail over any downstream consumers to the healthy job output. Escalation to support
will prevent the paired region from being affected by the new deployment and maintain the integrity of the
paired jobs.

Reference:
https://docs.microsoft.com/en-us/azure/stream-analytics/stream-analytics-job-reliability

QUESTION 3
A company is developing a mission-critical line of business app that uses Azure SQL Database Managed
Instance.

You must design a disaster recovery strategy for the solution/

You need to ensure that the database automatically recovers when full or partial loss of the Azure SQL
Database service occurs in the primary region.

What should you recommend?

A. Failover-group
B. Azure SQL Data Sync
C. SQL Replication
D. Active geo-replication

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Auto-failover groups is a SQL Database feature that allows you to manage replication and failover of a group of
databases on a SQL Database server or all databases in a Managed Instance to another region (currently in
public preview for Managed Instance). It uses the same underlying technology as active geo-replication. You
can initiate failover manually or you can delegate it to the SQL Database service based on a user-defined
policy.

Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-auto-failover-group

QUESTION 4
HOTSPOT

A company has locations in North America and Europe. The company uses Azure SQL Database to support
business apps.

62D227AA5C77F5C766AC37B5740F344D
Employees must be able to access the app data in case of a region-wide outage. A multi-region availability
solution is needed with the following requirements:

Read-access to data in a secondary region must be available only in case of an outage of the primary
region.
The Azure SQL Database compute and storage layers must be integrated and replicated together.

You need to design the multi-region high availability solution.

What should you recommend? To answer, select the appropriate values in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Box 1: Standard
The following table describes the types of storage accounts and their capabilities:

62D227AA5C77F5C766AC37B5740F344D
Box 2: Geo-redundant storage
If your storage account has GRS enabled, then your data is durable even in the case of a complete regional
outage or a disaster in which the primary region isn't recoverable.

Note: If you opt for GRS, you have two related options to choose from:
GRS replicates your data to another data center in a secondary region, but that data is available to be read only
if Microsoft initiates a failover from the primary to secondary region.
Read-access geo-redundant storage (RA-GRS) is based on GRS. RA-GRS replicates your data to another
data center in a secondary region, and also provides you with the option to read from the secondary region.
With RA-GRS, you can read from the secondary region regardless of whether Microsoft initiates a failover from
the primary to secondary region.

Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-introduction

https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy-grs

QUESTION 5
A company is designing a solution that uses Azure Databricks.

The solution must be resilient to regional Azure datacenter outages.

You need to recommend the redundancy type for the solution.

What should you recommend?

A. Read-access geo-redundant storage


B. Locally-redundant storage
C. Geo-redundant storage
D. Zone-redundant storage

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:

62D227AA5C77F5C766AC37B5740F344D
If your storage account has GRS enabled, then your data is durable even in the case of a complete regional
outage or a disaster in which the primary region isn’t recoverable.

Reference:
https://medium.com/microsoftazure/data-durability-fault-tolerance-resilience-in-azure-databricks-
95392982bac7

QUESTION 6
You have a line-of-business (LOB) app that reads files from and writes files to Azure Blob storage in an Azure
Storage account.

You need to recommend changes to the storage account to meet the following requirements:

Provide the highest possible availability.


Minimize potential data loss.

Which three changes should you recommend? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

A. From the app, query the LastSyncTime of the storage account.


B. From the storage account, enable soft deletes.
C. From the storage account, enable read-access geo-redundancy storage (RA-GRS).
D. From the app, add retry logic to the storage account interactions.
E. From the storage account, enable a time-based retention policy.

Correct Answer: BCE


Section: (none)
Explanation

Explanation/Reference:
Explanation:
Soft delete protects blob data from being accidentally or erroneously modified or deleted. When soft delete is
enabled for a storage account, blobs, blob versions (preview), and snapshots in that storage account may be
recovered after they are deleted, within a retention period that you specify.

Geo-redundant storage (with GRS or GZRS) replicates your data to another physical location in the secondary
region to protect against regional outages. However, that data is available to be read only if the customer or
Microsoft initiates a failover from the primary to secondary region. When you enable read access to the
secondary region, your data is available to be read if the primary region becomes unavailable. For read access
to the secondary region, enable read-access geo-redundant storage (RA-GRS) or read-access geo-zone-
redundant storage (RA-GZRS).

Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/soft-delete-overview

https://docs.microsoft.com/en-us/azure/storage/common/storage-redundancy#read-access-to-data-in-the-
secondary-region

QUESTION 7
A company is evaluating data storage solutions.

You need to recommend a data storage solution that meets the following requirements:

Minimize costs for storing blob objects.


Optimize access for data that is infrequently accessed.
Data must be stored for at least 30 days.
Data availability must be at least 99 percent.

62D227AA5C77F5C766AC37B5740F344D
What should you recommend?

A. Premium
B. Cold
C. Hot
D. Archive

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Azure’s cool storage tier, also known as Azure cool Blob storage, is for infrequently-accessed data that needs
to be stored for a minimum of 30 days. Typical use cases include backing up data before tiering to archival
systems, legal data, media files, system audit information, datasets used for big data analysis and more.

The storage cost for this Azure cold storage tier is lower than that of hot storage tier. Since it is expected that
the data stored in this tier will be accessed less frequently, the data access charges are high when compared
to hot tier. There are no additional changes required in your applications as these tiers can be accessed using
APIs in the same manner that you access Azure storage.

Reference:
https://cloud.netapp.com/blog/low-cost-storage-options-on-azure

QUESTION 8
A company has many applications. Each application is supported by separate on-premises databases.

You must migrate the databases to Azure SQL Database. You have the following requirements:

Organize databases into groups based on database usage.


Define the maximum resource limit available for each group of databases.

You need to recommend technologies to scale the databases to support expected increases in demand.

What should you recommend?

A. Read scale-out
B. Managed instances
C. Elastic pools
D. Database sharding

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
SQL Database elastic pools are a simple, cost-effective solution for managing and scaling multiple databases
that have varying and unpredictable usage demands. The databases in an elastic pool are on a single Azure
SQL Database server and share a set number of resources at a set price.
You can configure resources for the pool based either on the DTU-based purchasing model or the vCore-
based purchasing model.

Incorrect Answers:
D: Database sharding is a type of horizontal partitioning that splits large databases into smaller components,
which are faster and easier to manage.

62D227AA5C77F5C766AC37B5740F344D
Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-elastic-pool

QUESTION 9
You have an on-premises MySQL database that is 800 GB in size.

You need to migrate a MySQL database to Azure Database for MySQL. You must minimize service interruption
to live sites or applications that use the database.

What should you recommend?

A. Azure Database Migration Service


B. Dump and restore
C. Import and export
D. MySQL Workbench

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
You can perform MySQL migrations to Azure Database for MySQL with minimal downtime by using the newly
introduced continuous sync capability for the Azure Database Migration Service (DMS). This functionality limits
the amount of downtime that is incurred by the application.

Reference:
https://docs.microsoft.com/en-us/azure/mysql/howto-migrate-online

QUESTION 10
You plan to deploy an Azure SQL Database instance to support an application. You plan to use the DTU-based
purchasing model.

Backups of the database must be available for 30 days and point-in-time restoration must be possible.

You need to recommend a backup and recovery policy.

What are two possible ways to achieve the goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A. Use the Premium tier and the default backup retention policy.
B. Use the Basic tier and the default backup retention policy.
C. Use the Standard tier and the default backup retention policy.
D. Use the Standard tier and configure a long-term backup retention policy.
E. Use the Premium tier and configure a long-term backup retention policy.

Correct Answer: DE
Section: (none)
Explanation

Explanation/Reference:
Explanation:
The default retention period for a database created using the DTU-based purchasing model depends on the
service tier:
Basic service tier is 1 week.
Standard service tier is 5 weeks.

62D227AA5C77F5C766AC37B5740F344D
Premium service tier is 5 weeks.

Incorrect Answers:
B: Basic tier only allows restore points within 7 days.

Reference:
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-long-term-retention

QUESTION 11
You are designing an Azure Databricks cluster that runs user-defined local processes.

You need to recommend a cluster configuration that meets the following requirements:

Minimize query latency.


Reduce overall costs without compromising other requirements.
Maximize the number of users that can run queries on the cluster at the same time.

Which cluster type should you recommend?

A. Standard with Autoscaling


B. High Concurrency with Auto Termination
C. High Concurrency with Autoscaling
D. Standard with Auto Termination

Correct Answer: C
Section: (none)
Explanation

Explanation/Reference:
Explanation:
High Concurrency clusters allow multiple users to run queries on the cluster at the same time, while minimizing
query latency. Autoscaling clusters can reduce overall costs compared to a statically-sized cluster.

Incorrect Answers:
A, D: Standard clusters are recommended for a single user.

Reference:
https://docs.azuredatabricks.net/user-guide/clusters/create.html

https://docs.azuredatabricks.net/user-guide/clusters/high-concurrency.html#high-concurrency

https://docs.azuredatabricks.net/user-guide/clusters/terminate.html

https://docs.azuredatabricks.net/user-guide/clusters/sizing.html#enable-and-configure-autoscaling

QUESTION 12
You design data engineering solutions for a company that has locations around the world. You plan to deploy a
large set of data to Azure Cosmos DB.

The data must be accessible from all company locations.

You need to recommend a strategy for deploying the data that minimizes latency for data read operations and
minimizes costs.

What should you recommend?

A. Use a single Azure Cosmos DB account. Enable multi-region writes.


B. Use a single Azure Cosmos DB account Configure data replication.

62D227AA5C77F5C766AC37B5740F344D
C. Use multiple Azure Cosmos DB accounts. For each account, configure the location to the closest Azure
datacenter.
D. Use a single Azure Cosmos DB account. Enable geo-redundancy.
E. Use multiple Azure Cosmos DB accounts. Enable multi-region writes.

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
With Azure Cosmos DB, you can add or remove the regions associated with your account at any time.

Multi-region accounts configured with multiple-write regions will be highly available for both writes and reads.
Regional failovers are instantaneous and don't require any changes from the application.

Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/high-availability

QUESTION 13
HOTSPOT

You are designing a solution to store flat files.

You need to recommend a storage solution that meets the following requirements:

Supports automatically moving files that have a modified date that is older than one year to an archive in
the data store
Minimizes costs

A higher latency is acceptable for the archived files.

Which storage location and archiving method should you recommend? To answer, select the appropriate
options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

62D227AA5C77F5C766AC37B5740F344D
Correct Answer:

Section: (none)
Explanation

Explanation/Reference:
Explanation:

Storage location: Azure Blob Storage

62D227AA5C77F5C766AC37B5740F344D
Archiving method: A lifecycle management policy
Azure Blob storage lifecycle management offers a rich, rule-based policy for GPv2 and Blob storage accounts.
Use the policy to transition your data to the appropriate access tiers or expire at the end of the data's lifecycle.

The lifecycle management policy lets you:


Transition blobs to a cooler storage tier (hot to cool, hot to archive, or cool to archive) to optimize for
performance and cost
Delete blobs at the end of their lifecycles
Define rules to be run once per day at the storage account level
Apply rules to containers or a subset of blobs

Reference:
https://docs.microsoft.com/en-us/azure/storage/blobs/storage-lifecycle-management-concepts

QUESTION 14
HOTSPOT

You are planning the deployment of two separate Azure Cosmos DB databases named db1 and db2.

You need to recommend a deployment strategy that meets the following requirements:

Costs for both databases must be minimized.


Db1 must meet an availability SLA of 99.99% for both reads and writes.
Db2 must meet an availability SLA of 99.99% for writes and 99.999% for reads.

Which deployment strategy should you recommend for each database? To answer, select the appropriate
options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Correct Answer:

62D227AA5C77F5C766AC37B5740F344D
Section: (none)
Explanation

Explanation/Reference:
Explanation:

Db1: A single read/write region

Db2: A single write region and multi read regions

Reference:
https://docs.microsoft.com/en-us/azure/cosmos-db/high-availability

QUESTION 15
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

A company is developing a solution to manage inventory data for a group of automotive repair shops. The
solution will use Azure Synapse Analytics as the data store.

62D227AA5C77F5C766AC37B5740F344D
Shops will upload data every 10 days.

Data corruption checks must run each time data is uploaded. If corruption is detected, the corrupted data must
be removed.

You need to ensure that upload processes and data corruption checks do not impact reporting and analytics
processes that use the data warehouse.

Proposed solution: Insert data from shops and perform the data corruption check in a transaction. Rollback
transfer if corruption is detected.

Does the solution meet the goal?

A. Yes
B. No

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Instead, create a user-defined restore point before data is uploaded. Delete the restore point after data
corruption checks complete.

Reference:
https://docs.microsoft.com/en-us/azure/sql-data-warehouse/backup-and-restore

QUESTION 16
You manage a solution that uses Azure HDInsight clusters.

You need to implement a solution to monitor cluster performance and status.

Which technology should you use?

A. Azure HDInsight.NET SDK


B. Azure HDInsight REST API
C. Ambari REST API
D. Azure Log Analytics
E. Ambari Web UI

Correct Answer: E
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Ambari is the recommended tool for monitoring utilization across the whole cluster. The Ambari dashboard
shows easily glanceable widgets that display metrics such as CPU, network, YARN memory, and HDFS disk
usage. The specific metrics shown depend on cluster type. The "Hosts" tab shows metrics for individual nodes
so you can ensure the load on your cluster is evenly distributed. The Apache Ambari project is aimed at making
Hadoop management simpler by developing software for provisioning, managing, and monitoring Apache
Hadoop clusters. Ambari provides an intuitive, easy-to-use Hadoop management web UI backed by its
RESTful APIs.

Reference:
https://azure.microsoft.com/en-us/blog/monitoring-on-hdinsight-part-1-an-overview/

62D227AA5C77F5C766AC37B5740F344D
https://ambari.apache.org/

QUESTION 17
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

A company is developing a solution to manage inventory data for a group of automotive repair shops. The
solution will use Azure Synapse Analytics as the data store.

Shops will upload data every 10 days.

Data corruption checks must run each time data is uploaded. If corruption is detected, the corrupted data must
be removed.

You need to ensure that upload processes and data corruption checks do not impact reporting and analytics
processes that use the data warehouse.

Proposed solution: Create a user-defined restore point before data is uploaded. Delete the restore point after
data corruption checks complete.

Does the solution meet the goal?

A. Yes
B. No

Correct Answer: A
Section: (none)
Explanation

Explanation/Reference:
Explanation:
User-Defined Restore Points
This feature enables you to manually trigger snapshots to create restore points of your data warehouse before
and after large modifications. This capability ensures that restore points are logically consistent, which provides
additional data protection in case of any workload interruptions or user errors for quick recovery time.

Note: A data warehouse restore is a new data warehouse that is created from a restore point of an existing or
deleted data warehouse. Restoring your data warehouse is an essential part of any business continuity and
disaster recovery strategy because it re-creates your data after accidental corruption or deletion.

Reference:
https://docs.microsoft.com/en-us/azure/sql-data-warehouse/backup-and-restore

QUESTION 18
Note: This question is part of a series of questions that present the same scenario. Each question in
the series contains a unique solution that might meet the stated goals. Some question sets might have
more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these
questions will not appear in the review screen.

A company is developing a solution to manage inventory data for a group of automotive repair shops. The
solution will use Azure Synapse Analytics as the data store.

Shops will upload data every 10 days.

62D227AA5C77F5C766AC37B5740F344D
Data corruption checks must run each time data is uploaded. If corruption is detected, the corrupted data must
be removed.

You need to ensure that upload processes and data corruption checks do not impact reporting and analytics
processes that use the data warehouse.

Proposed solution: Configure database-level auditing in Azure Synapse Analytics and set retention to 10 days.

Does the solution meet the goal?

A. Yes
B. No

Correct Answer: B
Section: (none)
Explanation

Explanation/Reference:
Explanation:
Instead, create a user-defined restore point before data is uploaded. Delete the restore point after data
corruption checks complete.

Reference:
https://docs.microsoft.com/en-us/azure/sql-data-warehouse/backup-and-restore

62D227AA5C77F5C766AC37B5740F344D

You might also like

pFad - Phonifier reborn

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


Alternative Proxies:

Alternative Proxy

pFad Proxy

pFad v3 Proxy

pFad v4 Proxy