Exam DP-203 topic 4 question 48 discussion

In the Azure Portal --> Add a role-based access control (RBAC) role to kv1 In Synapse Studio --> Create a linked service to kv1

I'm reporting this comment on purpose so the ExamTopics team can review the answer, as requested below. ExamTopics team, please, do one of the following: 1) clearly explain and provide the support link or material for the answer you chose, or 2) correct the answers selected. As stated in previous answers in this discussion, the logic says that first you have to add the role in RBAC to kv1 and then associate the kv1 source as an linked service in synapse.

Azure Portal: RBAC "Authorization determines which operations the caller can perform. Authorization in Key Vault uses Azure role-based access control (Azure RBAC) on management plane and either Azure RBAC or Azure Key Vault access policies on data plane." Source: https://learn.microsoft.com/en-us/azure/key-vault/general/security-features Synapse: Linked Services Refer to the Steps number 3: "Create a linked service pointing to your Azure Key Vault." Source: https://learn.microsoft.com/en-us/azure/data-factory/store-credentials-in-key-vault#steps

The answer is incorrect. Should be: 1. Add a role-based access control (RBAC) role to kv 2. Create a linked service to kv1

ExamTopics solution is inverted... you cannot set a linked service from portal, just a detail. Correct answers: from portal --> RBAC on kv1 from synapse studio --> linked service on kv1 (this works exactly as in DataFactory)

Answer is not Correct.

Chatgpt: To enable Spark notebooks in Azure Synapse Analytics workspace `ws1` to retrieve secrets from Azure Key Vault `kv1` using the user-assigned managed identity `UAMI1`, you need to set the appropriate permissions and configurations: In the Azure portal: - Add a role-based access control (RBAC) role to `kv1`. Assign the user-assigned managed identity `UAMI1` the necessary role, like "Key Vault Secrets User", to retrieve secrets from the Key Vault. In Synapse Studio: - Create a linked service to `kv1`. This linked service should use the user-assigned managed identity `UAMI1` for authentication, allowing the Spark notebooks to use this linked service to access Key Vault secrets. So the selections should be: In the Azure portal: Add a role-based access control (RBAC) role to `kv1`. In Synapse Studio: Create a linked service to `kv1`.

The boxes should be reversed for the answers as it does not make sense currently

Box1. Add a role-based access control (RBAC) role to kv Box2. Create a linked service to kv1

In the Azure portal: Add a role-based access control (RBAC) role to kv1 - You need to assign the 'Key Vault Secrets User' role to UAMI1 on kv1. This will grant the managed identity the necessary permissions to retrieve secrets from Key Vault. In Synapse Studio: Create a linked service to kv1 - You need to create a linked service in Azure Synapse Studio to connect to kv1. The linked service will use the User-Assigned Managed Identity (UAMI1) to authenticate to the Azure Key Vault.