Implement Compliance Controls for Sensitive Data DP-300 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company needs to audit all login failures and successful logins for an Azure SQL Database. The administrator has already configured a server-level audit. What else should be configured to ensure that both failed and successful logins are audited?

   • AEnable the 'Audit logins' setting in the server-level audit.
   • BEnable change tracking on the database to track login events.
   • CConfigure a server-level audit to write to a Log Analytics workspace.
   • DCreate a database-level audit to audit logins.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A bank has an Azure SQL database with a 'Customers' table that includes a 'CreditCardNumber' column. The support team should see only the last four digits of the credit card number. The compliance team also requires that support team members cannot see the full number even if they query the table directly. What should the administrator do?

   • AApply dynamic data masking to the CreditCardNumber column with a mask function that shows only the last four digits.
   • BEncrypt the CreditCardNumber column with Always Encrypted and provide the decryption key only to the support team.
   • CCreate a view that selects only the last four digits and grant the support team access to the view instead of the table.
   • DEnable row-level security to filter rows based on the user's role.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A multi-tenant SaaS application uses a single Azure SQL database. Each tenant's data is stored in a 'Sales' table with a 'TenantID' column. Application users authenticate with Azure AD and their tenant membership is stored in a 'UserTenant' table. You need to ensure that users can only see rows for their own tenant. Additionally, the 'Revenue' column is sensitive and should be masked for users in the 'Analyst' role. What should you do?

   • ACreate a view that filters on TenantID and grant users access only to the view, and apply dynamic data masking to the Revenue column.
   • BCreate a row-level security predicate that filters on TenantID using the UserTenant table, and apply dynamic data masking to the Revenue column for the Analyst role.
   • CApply dynamic data masking to the Revenue column and create a server-level audit for all SELECT statements.
   • DEnable row-level security and create a database-level audit to track which rows each user accesses.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A bank must maintain a tamper-evident history of all transactions in a 'Transactions' table. The table is frequently updated, and the bank needs to prove that historical data has not been altered. They also need to audit who performed each transaction. What should you do?

   • AEnable dynamic data masking on the Transactions table and enable database-level auditing.
   • BCreate an append-only ledger table for Transactions and enable server-level auditing.
   • CEnable change data capture on the Transactions table and create a database audit specification.
   • DCreate an updatable ledger table for Transactions and enable database-level auditing.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An online retailer needs to synchronize product information from an Azure SQL database to an external search index. The search index needs to know which products were added, updated, or deleted since the last synchronization. The database administrator wants to use change tracking to capture these changes. What is the minimum configuration required?

   • ACreate a trigger that logs changes to a separate table, and have the search index query that table.
   • BEnable change tracking on the database and the product table, then use the CHANGETABLE function to query changes.
   • CEnable change data capture (CDC) on the database and the product table, then use the cdc.fn_cdc_get_all_changes function.
   • DEnable ledger on the product table and use the ledger history table to identify changes.
   Reveal Solution Discussion Select an answer first