DP-300 Certification Practice Question #78

Question

You have an Azure subscription that contains an Azure Data Factory version 2 (V2) data factory named df1. DF1 contains a linked service.
You have an Azure Key vault named vault1 that contains an encryption kay named key1.
You need to encrypt df1 by using key1.
What should you do first?

Accepted Answer

To encrypt an Azure Data Factory instance (`df1`) using a customer-managed key, the Data Factory must be completely empty (contain zero resources like pipelines, data flows, triggers, or linked services) when configuring the encryption. Because `df1` currently contains a linked service, you must remove the linked service from `df1` first. Additionally, the Azure Key Vault must have both Soft Delete and Purge Protection enabled, making options A and D incorrect since they suggest disabling these security features.

More DP-300 practice questions