EMPE DATA QUIZ

1. You've just deployed a new Azure Storage Account for your data lake. The data engineering team needs to be able to read and list blobs, but not delete or write. Which built-in Azure role is the most appropriate to assign them on the storage account?

• Contributor

• Reader

• Storage Blob Data Reader

• Storage Account Contributor

1. Your data pipelines running in Azure Data Factory need to retrieve secrets (like database connection strings) stored in an Azure Key Vault. Which built-in Azure role should the Data Factory's managed identity be assigned on the Key Vault to allow it to read secrets?

• Reader

• Contributor

• Key Vault Secrets Officer

• Key Vault Secrets Officer (Data Plane) or Key Vault Secrets Reader (Preview)

1. You are using Terraform to manage your Azure infrastructure. You have sensitive information, like connection strings, that you need to use in your Terraform configuration but don't want to hardcode in your .tf files or commit to Git. How should you handle this sensitive data?

• Store it in a variables.tf file and commit it. 

• Store it in a .tfvars file and commit it.

• Use Terraform's built-in sensitive keyword in variable definitions.

• Use a secrets management tool like Azure Key Vault and reference secrets in your Terraform code.

1. The team is working on a new feature in a dedicated branch. Before merging it into the main branch, you want to incorporate the latest changes from main into your feature branch without creating a merge commit. Which Git command is your friend here?

• git merge main

• git rebase main

• git cherry-pick main

• git stash

1. Your Azure Databricks workspace is deployed in a virtual network (VNet). You need to securely connect to an on-premises SQL Server database without exposing it to the public internet. Which Azure networking service is commonly used in this scenario to establish a secure connection between your VNet and on-premises network?

• Azure Application Gateway

• Azure Firewall

• Azure VPN Gateway or ExpressRoute

• Azure Load Balancer

1. A data science team needs full control (read, write, and delete) over blobs within a specific container in your storage account. Which built-in Azure role, scoped to that specific container, would grant them these permissions?

•  Contributor

• Storage Blob Data Reader

• Storage Blob Data Contributor

• Owner

1. When deploying an Azure Databricks workspace into your own virtual network (VNet Injection) using Terraform, you need to configure specific subnets for the workspace's control plane and data plane. What are the minimum number of subnets required for VNet-injected Databricks, and what are their primary purposes?

• 1 subnet for both control and data planes.

• 2 subnets: one for the control plane and one for the data plane.

• 3 subnets: one for the control plane, one for the data plane, and one for a NAT gateway.

• 2 subnets: one public and one private subnet used by the workspace.

1. To enhance security for an Azure Databricks workspace by ensuring that cluster nodes do not have public IP addresses and communicate with the control plane via a private link, which feature should be enabled, typically configured during workspace creation via Terraform?

• Serverless SQL Endpoints

• Public IP Elimination (Secure Cluster Connectivity)

• VNet Peering

• Databricks SQL Analytics

1. You've made some changes in your local branch and created a few commits. Now you want to send these commits to the remote repository so your teammates can see them. Which Git command do you use?

• git pull

• git fetch

• git clone

• git push

1. You have multiple virtual machines in an Azure VNet that need to communicate with each other securely using private IP addresses. You also want to control which ports and protocols are allowed between subnets within the VNet. What Azure networking construct is used to define these network security rules?

• Azure Load Balancer

• Azure Application Gateway

• Network Security Group (NSG)

• Azure DNS Private Zone