dp-900 Practice Question 1831
Exam: dp-900
Domain: Describe how to work with non-relational data on Azure
Topic: Describe non-relational data workloads
Difficulty: medium
A developer at Contoso Ltd is designing a new application that will store and query large amounts of semi-structured data related to social media interactions. They plan to use Azure Cosmos DB with a graph database model to represent relationships between users and posts. However, they are concerned about managing permissions and ensuring that only authorized users can access sensitive information. Which Azure service should they use to manage these permissions effectively?
Answer Options
A
Configure Azure Key Vault for secret management.
B
Use Azure Active Directory (Azure AD) for identity management.
C
Enable Cosmos DB’s built-in role-based access control (RBAC).
D
Implement custom authentication mechanisms within the application code.
Correct Answer
B: Use Azure Active Directory (Azure AD) for identity management.
Explanation
The correct answer is to use Azure Active Directory (Azure AD) for managing permissions. Azure AD provides robust identity management capabilities that can be integrated with Azure Cosmos DB to control access to sensitive data based on user roles and permissions.