Azure Databricks Platform Architect - 20 Questions and Answers

Here are 20 common questions and answers about Azure Databricks Platform Architect

This is a 20 questions quiz and exam that will test your knowledge about concepts related to Databricks platform administration on Azure. These questions will assess your knowledge about cloud-specific elements of the platform, including integration with managed services and security best practices.

Let's Test and practice Your Knowledge in Azure Databricks Platform Architect !!!

1) What are two benefits of Azure Databricks being a first-party service to Microsoft? (Choose two answers)

1. It is supported by Microsoft’s SLAs.
2. It is recommended to users when they create data resources.
3. It is not part of Microsoft’s billing structure.
4. It is covered by Microsoft’s Trust and Compliance assurances.

THE CORRECT ANSWER IS: 

It is supported by Microsoft’s SLAs.

It is covered by Microsoft’s Trust and Compliance assurances.

2) Which three items are minimally required for creating an Azure Databricks workspace? (Choose three answers)

1. A workspace name
2. An Azure firewall
3. A selected Azure region
4. A resource group
5. A pre-created VNet

THE CORRECT ANSWER IS:

A workspace name

A selected Azure region

A resource group

3) What is a service principal in Azure Databricks?

1. A trusted identity object representing a separate resource that is controlled and provided permissions or restrictions in the same way as human users.
2. A user object established specifically for non-human resources that will be using Azure Databricks for data analysis purposes.
3. A data object representing a data resource in the Azure Portal environment that will be utilized by users within Azure Databricks.

THE CORRECT ANSWER IS:

A trusted identity object representing a separate resource that is controlled and provided permissions or restrictions in the same way as human users.

4) Why would you create a VNet injected Azure Databricks workspace?

1. When you need a simple, ephemeral workspace.
2. When you need to access the workspace from an external IP address.
3. When you need additional control over the network.

THE CORRECT ANSWER IS:

When you need additional control over the network.

5) What is Secure Cluster Connectivity?

1. A configuration setting that establishes the Azure Databricks workspace with no public IP address for maximum security and flexibility.
2. A feature of Azure Databricks that adds an extra layer of security between the cluster nodes to prevent unauthorized traffic.
3. A tool for securely connecting compute clusters with data storage resources to prevent data loss or exfiltration.

THE CORRECT ANSWER IS:

A configuration setting that establishes the Azure Databricks workspace with no public IP address for maximum security and flexibility.

6) What is one of the use cases for Azure Databricks Private Link?

1. To create a private network connection between the Azure Databricks control plane and the Azure Databricks data plane or end user.
2. To create a private access connector to securely connect an ADLS Gen2 storage account with an Azure Databricks control plane.
3. To create a private subnet in the dedicated VNet for communication between compute cluster containers and VMs.

THE CORRECT ANSWER IS:

To create a private network connection between the Azure Databricks control plane and the Azure Databricks data plane or end user.

7) Which service allows tools like Terraform and ARM templates to work in Azure to deploy Azure Databricks workspaces?

1. Being managed services.
2. Azure Resource Manager.
3. Azure Infrastructure as a Service Platform.
4. Azure Databricks API offering.

THE CORRECT ANSWER IS:

Azure Resource Manager.

8) Azure Databricks is included and used in which three layers of the data reference architecture? (Choose three answers)

1. Serve
2. Ingest
3. Process
4. Store

THE CORRECT ANSWER IS:

Serve
Process
Store

9) What are the two designated subnets associated with an Azure Databricks workspace designed to do?

1. To specify the Azure region the workspace belongs to and how the workspace communicates with other workspaces in that region.
2. To allocate appropriate IP address ranges for communications between the control plane and data plane.
3. To facilitate communication between the container nodes of the compute cluster and the VMs around those node containers.

 

THE CORRECT ANSWER IS:

To facilitate communication between the container nodes of the compute cluster and the VMs around those node containers.

 

10) In which location is local VNet Peering used in an Azure Databricks data ecosystem?

1. Between the compute cluster container nodes and control plane.
2. Between resources with local IP addresses in the cloud data infrastructure.
3. Between two separate Azure Databricks workspaces in the same Azure account.
4. Between the control plane and the data plane of the Azure Databricks account.

THE CORRECT ANSWER IS:

Between resources with local IP addresses in the cloud data infrastructure.

 

11) For which two reasons would you use UDRs for managing network traffic for an Azure Databricks workspace? (Choose two answers)

1. To override BGP that may be confusing or incorrect.
2. Blocking user traffic from accessing Azure Databricks when accessing the workspace from a non listed IP Address.
3. To forbid ingress traffic from the public internet.
4. To control and direct the network traffic between cloud resources, Azure Databricks, networks, or firewalls.

THE CORRECT ANSWER IS: 

To override BGP that may be confusing or incorrect.

To control and direct the network traffic between cloud resources, Azure Databricks, networks, or firewalls.

12) What is the purpose of an IP Access list?

1. Controlling the approved IP addresses that can connect to an Azure Databricks workspace for security and DLP purposes.
2. Controlling the VNet Peering options associated with an Azure Databricks workspace for ease of network traffic and bandwidth.
3. Controlling the access points that are authorized for users to edit SQL warehouse configurations and cluster creation.
   
   

THE CORRECT ANSWER IS: 

Controlling the approved IP addresses that can connect to an Azure Databricks workspace for security and DLP purposes.

 

13) Which two tools does Azure Databricks provide data governance and access control? (Choose two answers)

1. Route Lists
2. Firewalls
3. Azure Active Directory
4. Unity Catalog
5. IP Access Lists

 

THE CORRECT ANSWER IS: 

Unity Catalog

IP Access Lists

 

14) Which two records are required in an Azure DNS for a Private Link enabled Azure Databricks workspace? (Choose two answers)

1. SRV Service records
2. Azure DB AName record
3. OAuth Callback CNames
4. A record for the control plane

THE CORRECT ANSWER IS:

OAuth Callback CNames
A record for the control plane

15) What resource is necessary for connecting Azure Databricks control plane to a Unity Catalog external storage location?

1. A Unity Catalog metastore
2. An Azure Databricks Access Connector
3. An Azure Storage Manager token

THE CORRECT ANSWER IS:

An Azure Databricks Access Connector

16) How does a service principal interact with an Azure Databricks environment?

1. Through the Azure Databricks REST API
2. Through identity passthrough
3. Through a UI interface widget

THE CORRECT ANSWER IS:

Through the Azure Databricks REST API

17) Which three items can be managed by Unity Catalog? (Choose three answers)

1. Notebooks
2. Users
3. Tables
4. Service principals
5. Cluster configurations

THE CORRECT ANSWER IS:

Users
Tables
Service principals

18) Which role does an access connector need in order to be used to access a storage account in Azure from within Azure Databricks?

1. Owner
2. Storage Blob Data Contributor
3. Managed Application Contributor Role
4. Contributor

THE CORRECT ANSWER IS:

Storage Blob Data Contributor

19) What is added to the end of your Azure Databricks workspace URL to access and create Secret Scopes for use with Azure Key Vaults?

1. #secretScope
2. #secrets/createScope
3. #secretScopeCreate
4. #create/secretScope

THE CORRECT ANSWER IS:

#secrets/createScope

20) What is a benefit of using an Unity Catalog metastore?

1. A UC metastore can be assigned to multiple workspaces in a single region.
2. A UC metastore provides a decentralized access control mechanism.
3. Workspaces can have more than one metastore assigned through UC.

THE CORRECT ANSWER IS:

A UC metastore can be assigned to multiple workspaces in a single region.