Implement Data Security DP-203 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In Azure SQL Database, which statement about Dynamic Data Masking is true?

   • AIt prevents unauthorized users from querying masked columns.
   • BIt can be applied to columns to obfuscate sensitive data in query results.
   • CIt encrypts the data at rest in the database files.
   • DIt changes the underlying data in the table.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   You need to hide the middle digits of a credit card number when displayed to customer support agents in an Azure SQL Database query result. Which feature should you use?

   • ARow-Level Security
   • BDynamic Data Masking
   • CAlways Encrypted
   • DTransparent Data Encryption
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   In Azure Databricks, what is the purpose of a resource token?

   • ATo encrypt data at rest in Databricks tables
   • BTo authenticate API calls to the Databricks workspace
   • CTo provide a shared secret for database connections
   • DTo manage cluster permissions
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   Your company has an Azure SQL Database with a table that contains a column 'SSN'. You need to protect this column from being viewed by most users, but you also need to allow a specific group of auditors to see the full value. You also need to ensure that the data is encrypted at rest. You have implemented dynamic data masking (DDM) on the column. However, you find that the auditors cannot see the unmasked value even though they have been granted the UNMASK permission. What is the most likely cause?

   • AThe auditors are connecting to the database using a service account that does not have the UNMASK permission.
   • BDynamic data masking does not support the UNMASK permission; you need to use column-level security instead.
   • CThe auditors are using a client application that does not support dynamic data masking.
   • DThe column is also encrypted with Always Encrypted, which prevents DDM from unmasking.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which Azure Data Lake Storage Gen2 feature allows you to set granular permissions on files and directories similar to Linux file systems?

   • AShared access signatures
   • BAzure RBAC roles
   • CAzure Policy
   • DPOSIX-like access control lists (ACLs)
   Reveal Solution Discussion Select an answer first