25-30% of exam
Secure Data
Implement security controls, access management, and compliance
Ingest and Transform DataFabric Foundations and OneLakeApache Spark and NotebooksLakehouse, Delta Lake and Medallion ArchitectureFabric Data WarehouseStreaming Data and Real-Time IntelligenceMonitor and Maintain DataCI/CD and Lifecycle ManagementSecure DataFinal Revision: Scenario and Component Guide
Access Control
Manage access to data and resources:
Workspace Permissions
- Admin, Member, Contributor, Viewer roles
- Item-level permissions (Read, Reshare, Build)
- Share individual items without workspace access
Lakehouse Security
- SQL endpoint security with T-SQL GRANT statements
- Row-level security (RLS) for fine-grained access
- Column-level security for sensitive data
OneLake Security
- Inherits workspace permissions
- Support for ACLs at folder/file level
- Integration with Microsoft Entra ID
Data Protection
Protect sensitive data:
Microsoft Purview Integration
- Sensitivity labels for classification
- Label inheritance across Fabric items
- Protection policies for export control
Encryption
- Data encrypted at rest by default
- Customer-managed keys (CMK) support
- Encryption in transit (TLS 1.2+)
Private Connectivity
- Managed private endpoints
- VNet integration for secure access
- Private Link for secure connectivity
Compliance and Auditing
Meet compliance requirements:
Audit Logging
- Track user activities across Fabric
- Export audit logs for analysis
- Retention policies for audit data
Data Residency
- Choose region for data storage
- Understand data movement boundaries
Certifications
- SOC 2, ISO 27001, HIPAA BAA, GDPR compliance
- Review compliance documentation for requirements