Implement Data Security DP-203 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   In Azure SQL Database, which component is used to define the logic for Row-Level Security?

   • AA security policy with an inline table-valued function
   • BA view that joins to a user table
   • CA stored procedure that filters data
   • DA database trigger that modifies queries
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which Azure RBAC role provides read and write access to data in an Azure Storage account?

   • AStorage Account Key Operator
   • BReader
   • CContributor
   • DStorage Blob Data Contributor
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   What is the purpose of an Azure Private Endpoint?

   • ATo encrypt data in transit
   • BTo provide a public IP address for the service
   • CTo provide a private IP address for an Azure service within a virtual network
   • DTo filter traffic with network security groups
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   What is the primary purpose of Column-Level Security in Azure SQL Database?

   • ATo restrict access to specific columns for certain users or roles.
   • BTo mask column values in query results.
   • CTo filter rows based on user identity.
   • DTo encrypt individual columns in the database.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   Your organization has an Azure SQL Database that stores customer data, including a column named EmailAddress. You need to protect the email addresses from being viewed by support staff who do not have a legitimate need to see them, but you still want the support staff to be able to run queries that return the email column (e.g., for COUNT or JOIN operations). You also want to ensure that the actual email addresses are never stored in plaintext in the database backups. What should you implement?

   • ARevoke SELECT permission on the EmailAddress column from support staff and rely on column-level security.
   • BUse Azure Storage Service Encryption (SSE) on the database backup files.
   • CApply dynamic data masking to the EmailAddress column and enable Transparent Data Encryption (TDE) on the database.
   • DEncrypt the EmailAddress column using Always Encrypted and grant support staff the ability to decrypt it.
   Reveal Solution Discussion Select an answer first