You have a Fabric workspace named Workspace1 that contains a warehouse named Warehouse2. A team of data analysts has Viewer role access to Workspace1. You create a table by running the following…

This question tests knowledge of Dynamic Data Masking (DDM) in Microsoft Fabric Warehouse, specifically how to apply a partial masking function to expose only certain characters of a sensitive column to users without elevated privileges.

Manage data governance and security

Question

You have a Fabric workspace named Workspace1 that contains a warehouse named Warehouse2. A team of data analysts has Viewer role access to Workspace1. You create a table by running the following statement. CREATE TABLE [warehouse2].[dbo].[CreditCard] ( Creditcard varchar(20) NOT NULL ,Creditcardtype varchar(10) NOT NULL) GO You need to ensure that the team can view only the first two characters and the last four characters of the CreditCard attribute. How should you complete the statement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Explanation

Approach. The correct approach is to apply Dynamic Data Masking to the CreditCard column using the partial() masking function. The syntax is MASKED WITH (FUNCTION = 'partial(2, "XXXXXXXXXXXXXXXXXX", 4)'), where the three arguments are: (1) number of leading characters to expose (2), (2) the padding string shown in the middle (arbitrary X's), and (3) number of trailing characters to expose (4). This is added inline in the CREATE TABLE statement or via ALTER TABLE ... ALTER COLUMN ... ADD MASKED WITH (...). Viewer-role users who lack the UNMASK permission will automatically see the masked output (e.g., 'Vi##################3456'), satisfying the requirement without any extra GRANT needed for the analysts.

Concept tested. Dynamic Data Masking (DDM) in Microsoft Fabric Warehouse - specifically the partial(prefixLength, padding, suffixLength) masking function used to redact the middle portion of a sensitive string column while preserving a configurable number of leading and trailing characters for users who do not hold the UNMASK permission.

Reference. Microsoft Learn - 'Dynamic data masking in Fabric data warehouse': https://learn.microsoft.com/en-us/fabric/data-warehouse/dynamic-data-masking

Topics

#Dynamic Data Masking#Data Security#Fabric Warehouse#Column-level security

Community Discussion

No community discussion yet for this question.

Full DP-700 Practice