Exam DP-700 Topic 1 Question 84 Discussion

Actual exam question for Microsoft's DP-700 exam
Question #: 84
Topic #: 1
You have a Fabric capacity that contains a workspace named Workspace1. Workspace1 contains a lakehouse named Lakehouse1, a data pipeline, a notebook, and several Microsoft Power BI reports.
A user named User1 wants to use SQL to analyze the data in Lakehouse1.
You need to configure access for User1. The solution must meet the following requirements:
Provide User1 with read access to the table data in Lakehouse1.
Prevent User1 from using Apache Spark to query the underlying files in Lakehouse1.
Prevent User1 from accessing other items in Workspace1.
What should you do?

Suggested Answer: B Vote an answer

To meet the specified requirements for User1, the solution must ensure:
Read access to the table data in Lakehouse1: User1 needs permission to access the data within Lakehouse1. By sharing Lakehouse1 with User1 and selecting the Read all SQL endpoint data option, User1 will be able to query the data via SQL endpoints.
Prevent Apache Spark usage: By sharing the lakehouse directly and selecting the SQL endpoint data option, you specifically enable SQL-based access to the data, preventing User1 from using Apache Spark to query the data.
Prevent access to other items in Workspace1: Assigning User1 the Viewer role for Workspace1 ensures that User1 can only view the shared items (in this case, Lakehouse1), without accessing other resources such as notebooks, pipelines, or Power BI reports within Workspace1.
This approach provides the appropriate level of access while restricting User1 to only the required resources and preventing access to other workspace assets.

by Moses at Apr 29, 2025, 10:20 PM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
consdev0
2025-12-25 04:20:25
Selected Answer: A
A
upvoted 1 times
...
david.w3bb
2025-08-26 20:10:28
Selected Answer: A
Share Lakehouse1 with User1 directly and select Read all SQL endpoint data. No Workspace level access is needed to be grated.
upvoted 2 times
...
ouenniche.aymen
2025-08-24 06:23:13
Selected Answer: A
A
upvoted 2 times
...
kundradevansh5
2025-07-12 11:01:02
A is correct. Workspace access is not needed. When you share a lakehouse, you grant other users or groups access to a lakehouse without giving access to the workspace and the rest of its items.

Ref: https://learn.microsoft.com/en-us/fabric/data-engineering/lakehouse-sharing
upvoted 2 times
...
testlearn
2025-06-19 18:04:12
Selected Answer: A
upvoted 2 times
...
Poep
2025-06-16 14:03:16
Selected Answer: A
A
upvoted 2 times
...
jdb
2025-06-14 06:30:33
Selected Answer: A
🔐 Why Option A is Correct:
Sharing Lakehouse1 directly gives fine-grained access control — no need to assign workspace-level roles.
Selecting "Read all SQL endpoint data" allows User1 to:
Query tables via the SQL analytics endpoint,
Not access the underlying files or use Spark,
Avoid access to notebooks, pipelines, or Power BI reports.
❌ Why the other options are incorrect:
B. Assign Viewer role + Share Lakehouse1:

Viewer role gives read access to all workspace items, which violates the requirement to restrict access to only Lakehouse1.
C. Share Lakehouse1 + Build reports on semantic model:

This allows Power BI report building, not SQL querying of the lakehouse tables.
D. Assign Member role + Share Lakehouse1:

Member role gives broad permissions, including access to Spark and other workspace items — too much access.
upvoted 5 times
...
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10