What is a recommended strategy for managing sensitive information in Azure data solutions?

Embed secrets in application code

Use the same secret for all environments

Store secrets in configuration files

Use Azure Key Vault to store secrets and keys

What is the primary purpose of using TLS/SSL for data in transit?

To compress data to reduce bandwidth usage.

To encrypt data while it is stored on disk.

To authenticate users to the database.

To protect data from being intercepted or modified during transmission.

A company stores financial records in Azure Blob Storage. Regulatory requirements mandate that records be retained for 7 years and then deleted. The company also wants to protect the records from accidental deletion during the retention period. What should you implement?

Enable Azure Storage Service Encryption and rely on the encryption key lifecycle to delete data after 7 years.

Apply a legal hold on the container for 7 years and then manually delete the blobs after the hold expires.

Apply a time-based retention policy on the container for 7 years and configure a lifecycle management rule to delete blobs after 7 years.

Use a lifecycle management rule to delete blobs after 7 years and enable versioning to protect against accidental deletion.

You need to ensure that data written to an Azure Storage account is encrypted before it is persisted to disk. What is the default behavior of Azure Storage Service Encryption?

It encrypts data only when using customer-managed keys.

It is enabled by default and cannot be disabled.

It is only available for premium storage accounts.

It must be manually enabled for each storage account.

What is the primary purpose of a data retention policy in Azure Storage?

To back up data to another region

To manage the lifecycle of data by transitioning or deleting it based on rules

To control who can access the data

Microsoft Certified:Azure Data Engineer Associate

Domain 3Objective 1

Implement Data Security DP-203 Practice Questions (Page 3)

Part of the Secure, monitor, and optimize data storage and data processing domain, which accounts for 30–35% of the DP-203 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 4–8 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

13concepts

30–35%of the exam

Questions 11–15

11foundation · easy
What is a recommended strategy for managing sensitive information in Azure data solutions?
Select an answer first
12foundation · easy
What is the primary purpose of using TLS/SSL for data in transit?
Select an answer first
13expert · medium
A company stores financial records in Azure Blob Storage. Regulatory requirements mandate that records be retained for 7 years and then deleted. The company also wants to protect the records from accidental deletion during the retention period. What should you implement?
Select an answer first
14foundation · easy
You need to ensure that data written to an Azure Storage account is encrypted before it is persisted to disk. What is the default behavior of Azure Storage Service Encryption?
Select an answer first
15foundation · easy
What is the primary purpose of a data retention policy in Azure Storage?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DP-203

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “DP-203” is a trademark of its owner, used for identification only.