You plan to create an Azure Cosmos DB Core (SQL) API account that will use customer-managed keys stored in Azure Key Vault.You need to configure an access policy in Key Vault to allow Azure Cosmos DB access to the keys.Which three permissions should you enable in the access policy? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
You need to configure an Apache Kafka instance to ingest data from an Azure Cosmos DB Core (SQL) API account. The data from a container named telemetry must be added to a Kafka topic named iot. The solution must store the data in a compact binary format.Which three configuration items should you include in the solution? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
You are implementing an Azure Data Factory data flow that will use an Azure Cosmos DB (SQL API) sink to write a dataset. The data flow will use 2,000 ApacheSpark partitions.You need to ensure that the ingestion from each Spark partition is balanced to optimize throughput.Which sink setting should you configure?
You have a container named container1 in an Azure Cosmos DB Core (SQL) API account.You need to provide a user named User1 with the ability to insert items into container1 by using role-based access control (RBAC). The solution must use the principle of least privilege.Which roles should you assign to User1?
You have an Azure Cosmos DB Core (SQL) API account.You configure the diagnostic settings to send all log information to a Log Analytics workspace.You need to identify when the provisioned request units per second (RU/s) for resources within the account were modified.You write the following query.AzureDiagnostics -| where Category == "ControlPlaneRequests"What should you include in the query?
HOTSPOT -You have an Azure Cosmos DB Core (SQL) API account named account1 that has the disableKeyBasedMetadataWriteAccess property enabled.You are developing an app named App1 that will be used by a user named DevUser1 to create containers in account1. DevUser1 has a non-privileged user account in the Azure Active Directory (Azure AD) tenant.You need to ensure that DevUser1 can use App1 to create containers in account1.What should you do? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
