Implement Compliance Controls for Sensitive Data DP-300 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A hospital uses an Azure SQL database to store patient records. Doctors should see all rows for their own patients, but nurses should only see rows for patients in their assigned ward. The 'Diagnosis' column is considered highly sensitive and should be masked for nurses. You need to implement a solution that restricts row access based on the user's role and masks the Diagnosis column for nurses. What should you do?

   • ACreate two row-level security predicates, one for doctors and one for nurses, and apply dynamic data masking to the Diagnosis column for the nurse role.
   • BCreate two views, one for doctors and one for nurses, and grant access to the appropriate view.
   • CEnable database-level auditing and apply dynamic data masking to the Diagnosis column for the nurse role.
   • DCreate a single row-level security predicate that filters based on the user's role, and apply dynamic data masking to the Diagnosis column for all users.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A logistics company needs to synchronize shipment status changes from an Azure SQL database to a reporting system. The reporting system polls the database every 10 minutes to get changes since the last poll. The administrator wants to use change tracking. What is the primary advantage of change tracking over change data capture (CDC) for this scenario?

   • AChange tracking requires less overhead and is simpler to configure than CDC.
   • BChange tracking captures the old and new values of changed columns.
   • CChange tracking provides a tamper-evident history of changes.
   • DChange tracking can be enabled without requiring SQL Agent.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   You need to configure auditing for an Azure SQL Database server to track events across all databases on that server. Which auditing level should you configure?

   • ADatabase-level auditing
   • BBoth server-level and database-level auditing
   • CInstance-level auditing
   • DServer-level auditing
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   You need to audit specific database activities, such as SELECT statements on a sensitive table, for a single Azure SQL database. Which auditing configuration should you use?

   • AServer-level auditing
   • BDynamic Data Masking
   • CDatabase-level auditing
   • DAdvanced Threat Protection
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A security audit revealed that a developer accidentally deleted a table in an Azure SQL database. The company needs to determine who deleted the table and when. They also need to ensure that future schema changes are audited. The company has both server-level and database-level auditing available. What should you do to investigate and prevent recurrence?

   • AReview the dynamic data masking logs for the deleted table.
   • BReview the server-level audit logs for DDL events and enable database-level auditing to capture future schema changes.
   • CReview the change data capture logs for the deleted table.
   • DReview the database-level audit logs for DML events and enable server-level auditing to capture future schema changes.
   Reveal Solution Discussion Select an answer first