Question

A data engineering team runs Fabric notebooks that must read data from an Azure SQL database secured behind a private endpoint with public network access disabled. The team needs Spark workloads in their Fabric workspace to reach the database over the Microsoft backbone without exposing it to the public internet. Which workspace-level configuration should they enable?

Accepted Answer

Enable managed private endpoints (managed virtual network) for the workspace and create a managed private endpoint targeting the Azure SQL database

Answer

Configure a workspace identity and grant it Contributor access to the Azure SQL server

Answer

Assign the workspace to a domain and enable OneLake external data sharing

Answer

Enable high-concurrency Spark sessions so notebooks share a single secured session