Selecting the right engine for a real-time workload
Microsoft Fabric offers multiple ways to process streaming data, and choosing the right engine depends on your latency, transformation complexity, and destination needs. The main options are Eventstream for no-code ingestion/routing, Spark Structured Streaming for complex custom transformations, and KQL (Eventhouse) for high-speed analytical querying of streaming data.
Must-know
- Eventstream is the low-code/no-code engine for ingesting, filtering, and routing streaming data from sources like Event Hubs, IoT Hub, or Kafka to destinations such as Lakehouse, Eventhouse, or KQL Database.
- Spark Structured Streaming (via Fabric notebooks or jobs) is the right choice when you need complex, custom transformation logic, windowed aggregations, or joins with batch data using PySpark/Scala/SQL.
- KQL (Kusto Query Language) against an Eventhouse/KQL Database is optimized for near-real-time analytical queries on high-volume streaming data with sub-second latency, ideal for dashboards and anomaly detection.
- Data Activator is not a transformation engine but a rule-based trigger service that monitors streaming data (often from Eventstream or KQL) and fires actions/alerts when conditions are met.
- A common gotcha: Eventstream handles simple transformations (filter, aggregate, expand) natively, but for advanced stateful processing you must route data to Spark or a custom endpoint rather than trying to force it into Eventstream alone.
- Choice often depends on latency requirements: Eventstream/KQL suit sub-second to seconds-level near-real-time needs, while Spark Structured Streaming is better for micro-batch scenarios (seconds to minutes) requiring heavier compute or ML integration.
A network operations team ingests millions of telemetry events per minute and needs sub-second, ad hoc KQL queries for anomaly detection and interactive exploration, with automatic indexing and no need to predefine every query pattern in advance. Which combination of Fabric capabilities should they use to store and query this streaming data?
What you have tried across DP-700's objectives, not a readiness score.
Implement and manage an analytics solution
- Tuning a workspace's Spark compute defaults and pool sizing
- Grouping and governing workspaces with a Fabric domain
- Setting per-workspace defaults for OneLake storage
- Standing up an Airflow job runtime inside a workspace
- Connecting a workspace to a Git repository
- Managing schema changes with a database project
- Promoting Fabric items across environments with a deployment pipeline
- Granting and restricting access at the workspace level
- Locking down who can open a single Fabric item
- Layering row, column, object, and file-level security rules
- Hiding sensitive column values behind a dynamic mask
- Classifying Fabric items with a sensitivity label
- Marking a trusted item as promoted or certified
- Reading a Fabric audit log to see who did what
- Securing data at the OneLake storage layer
- Picking the right build tool among a dataflow, a pipeline, and a notebook
- Kicking off a job on a schedule or in response to an event
- Chaining notebooks and pipelines together with parameters and dynamic expressions
Ingest and transform data
- Deciding between a full reload and an incremental load
- Shaping source data ahead of a dimensional-model load
- Landing a continuous stream of data into storage
- Matching a workload to the right Fabric data store
- Picking a transformation tool from dataflows, notebooks, KQL, or T-SQL
- Linking to external data without copying it via a OneLake shortcut
- Keeping a source database continuously replicated into Fabric
- Moving data into Fabric with a data pipeline
- Writing transform logic in PySpark, SQL, or KQL
- Flattening related tables into one wide, denormalized shape
- Rolling records up with group-by aggregations
- Dealing with duplicate rows, gaps, and data that arrives late
- Selecting the right engine for a real-time workload
- Weighing storage-in-place against a linked shortcut for a Real-Time Intelligence table
- Weighing an accelerated shortcut against a standard one for query speed
- Routing and reshaping live events with an Eventstream
- Handling a continuous flow of records with Spark's structured streaming
- Querying and reshaping event data with KQL
- Aggregating a stream over sliding or tumbling time windows
Monitor and optimize an analytics solution
- Watching an ingestion job's health and progress
- Watching a transformation job's health and progress
- Tracking whether a semantic model's refresh actually succeeded
- Setting up an alert to catch a failure early
- Tracking down why a pipeline run failed and fixing it
- Diagnosing why a dataflow run failed
- Debugging a notebook run that failed
- Troubleshooting a misbehaving Eventhouse
- Troubleshooting a misbehaving Eventstream
- Debugging a T-SQL statement that failed
- Fixing a broken or unreachable shortcut
- Speeding up a Lakehouse table with maintenance operations
- Making a slow pipeline run faster
- Tuning a Fabric warehouse for faster queries
- Improving throughput on real-time streaming components
- Tuning a Spark job to run faster and cheaper
- Making a slow query run faster
Coverage checked against the published exam guide on Aug 11, 2026.
These are independent practice questions, written against this certification's published exam guide. They are not the certification vendor's own questions, and not the real exam.