Question 760 An analyst can see a classified asset's catalog description but cannot query the underlying table. Why is this reasonable? Metadata discoverability can differ from data-read authorization The asset must be publicly readable to be cataloged Storage capacity automatically determines query privileges Any data map reader receives subscription Owner Explanation Correct Answer A:A catalog entry does not grant access to protected source rows. Incorrect Answers B:Discovery need not imply public access. C:Authorization isn't a storage size function. D:Catalog viewing is not Azure RBAC delegation.
Question 761 A product team creates a new regulated dataset and wants a responsible contact for access decisions. What metadata is useful? Choose the largest VM SKU as the owner Assign resource-group tags as the only record of the underlying data owner Store only the dataset's disk IOPS count Document the data owner or steward in the governance catalog Explanation Correct Answer D:Assigned stewardship supports accountable data requests and decisions. Incorrect Answers A:Compute sizes don't assign accountability. B:Infrastructure tags do not replace verified stewardship metadata for datasets and their governance responsibilities. C:Performance doesn't establish who owns the data.
Question 762 A business wants to apply supported sensitivity labels to Microsoft 365 content as part of data protection. Which Microsoft Purview area is relevant? Information protection and sensitivity labeling capabilities Azure Storage redundancy alone Azure VPN Gateway tunnel metrics Azure VM availability sets Explanation Correct Answer A:Purview includes protection-oriented classifications for supported content. Incorrect Answers B:Replication doesn't apply sensitivity labels. C:VPN telemetry doesn't label documents. D:Fault placement isn't document classification.
Question 763 A records team must retain certain collaboration documents for a defined period under supported Microsoft 365 compliance capabilities. Which Purview concept may be relevant? Only an App Service scale-out threshold Retention policies or labels for the supported content workloads Use a Blob access tier as the organization's data retention rule Changing a VM public IP Explanation Correct Answer B:Retention controls address preservation and disposal according to policy. Incorrect Answers A:Compute capacity doesn't enforce retention. C:Access tiers affect storage access and pricing; they do not by themselves define enterprise records-retention obligations. D:Network addressing isn't a records retention rule.
Question 764 An auditor investigates who accessed or changed sensitive supported cloud content. Which governance evidence should be considered? Only a storage account's Hot access tier Use only the Azure subscription activity log to reconstruct all individual data access Available Purview audit records and configured retention of relevant activity Only the Azure Pricing Calculator quote Explanation Correct Answer C:Audit logs can help reconstruct actions within covered workloads. Incorrect Answers A:Tiering isn't activity evidence. B:Management-plane operations do not universally contain the detailed data-use evidence requested by Purview auditing. D:Cost projection doesn't list data access events.
Question 765 An enterprise labels files in one Microsoft service and assumes labels automatically protect every custom application database. What should it verify? Disabling data access logs makes labels stronger Assume one Purview scan can classify every unsupported system with no connector or permission checks The supported workload coverage and enforcement integrations for each data store Every SQL table inherits a Microsoft 365 document label without setup Explanation Correct Answer C:Protection labels and policies don't automatically extend to arbitrary systems. Incorrect Answers A:Less telemetry doesn't improve enforcement. B:Data governance coverage depends on supported sources, scan configuration and effective source access. D:Products and policies have distinct scopes.
Question 766 Data teams want a consistent policy for requesting access to discovered datasets. What process complements the Purview catalog? Enable anonymous read for every cataloged source A governed access-request and approval workflow tied to accountable asset owners Give every analyst the database server root password Move every dataset to one public subnet Explanation Correct Answer B:Discovery can guide requests but doesn't replace authorization decisions. Incorrect Answers A:Public access defeats least privilege. C:Shared full authority is inappropriate. D:Network exposure isn't access governance.
Question 767 A governance team sees gaps in data lineage for a bespoke application. What is the safest conclusion? Every missing lineage edge proves the data was never transformed Azure cost tags automatically capture column-level transformations Lineage visibility depends on supported integrations, collection and transformation paths Deleting the catalog fixes missing provenance Explanation Correct Answer C:Missing edges may require additional instrumentation rather than proving no dependency. Incorrect Answers A:Lineage may be incomplete. B:Cost classification isn't data lineage instrumentation. D:Destruction removes evidence.
Question 768 A compliance officer needs to classify regulated data while operations needs to deny unapproved Azure regions. Which split of responsibilities fits? Use Azure Policy as the only tool to discover sensitive table contents Use Purview alone to reject every ARM deployment region Use VM Scale Sets to implement the legal requirements Use Purview for relevant data governance and Azure Policy for resource placement enforcement Explanation Correct Answer D:Data discovery/classification and ARM deployment policy address different controls. Incorrect Answers A:Resource policy doesn't replace data catalog scanning. B:Data cataloging is not the generic ARM policy engine. C:Compute scaling isn't governance enforcement.
Question 769 A Purview scan cannot access a protected source database. Which prerequisite should be validated? Increase the database disk size before every scan Grant the scan operator visibility of the Purview collection but no read access to the source An authorized connector, authentication method and permitted network path Only the source's resource group description Explanation Correct Answer C:Scanners need supported credentials and connectivity to discover sources. Incorrect Answers A:Capacity isn't necessarily the missing access permission. B:Purview catalog access does not automatically give the scan identity the database permissions and network path it requires. D:Text doesn't grant data access.
Question 770 A data analyst finds an inconsistent glossary definition for net revenue. What action supports trustworthy governance? Turn off source audit logs while revising metadata Update only a catalog glossary term and assume source database values change automatically Review the definition with business owners and align it with actual source logic Change the glossary text without consulting dataset owners Explanation Correct Answer C:A glossary term needs stewardship and implementation traceability. Incorrect Answers A:Losing evidence doesn't validate calculations. B:A business glossary describes terms; it does not modify the underlying production data on its own. D:Unreviewed definitions can stay misleading.
