You want to enable change tracking on an Azure SQL database table. Which T-SQL statement should you use?

ALTER DATABASE ... SET CHANGE_TRACKING = ON

ALTER TABLE ... ENABLE CHANGE_TRACKING

CREATE TABLE ... WITH CHANGE_TRACKING

EXEC sp_enable_change_tracking 'TableName'

A multi-tenant SaaS application uses a single Azure SQL database for all tenants. Each tenant's data is identified by a 'TenantId' column. The application uses a single login for all users, but each user has a custom claim that contains their TenantId. The security team wants to ensure that users can only see rows for their own tenant. What should the administrator implement?

Create a database-level audit to log all queries and review them for cross-tenant access.

Create a view that filters rows based on the USER_NAME() function.

Create a security policy with a predicate function that filters rows based on the SESSION_CONTEXT value.

Apply dynamic data masking to the TenantId column.

A healthcare company stores patient email addresses in an Azure SQL database. The compliance team requires that support staff who query the database see masked email addresses, while the billing team must see full addresses. The database administrator has already classified the email column as 'Confidential'. Which two actions should the administrator take to meet the requirement with the least administrative overhead?

Encrypt the email column with Always Encrypted and provide the column encryption key to the billing team only.

Create a view that masks the email column, and revoke SELECT on the base table from all users.

Create a database-level audit that logs all queries against the email column, and grant the support staff the SELECT permission.

Apply a dynamic data masking rule to the email column, and grant the UNMASK permission only to the billing team.

You are implementing dynamic data masking on an Azure SQL database. Which T-SQL statement adds a masking function to a column?

ALTER DATABASE ... SET MASKING = ON

CREATE MASK ON TABLE ... COLUMN ...

ALTER TABLE ... ALTER COLUMN ... ADD MASKED WITH (FUNCTION = 'default()')

EXEC sp_mask_column 'TableName', 'ColumnName'

Microsoft Certified:Azure Database Administrator Associate

Domain 2Objective 3

Implement Compliance Controls for Sensitive Data DP-300 Practice Questions (Page 4)

Part of the Implement a secure environment domain, which accounts for 20–25% of the DP-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 3–5 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

20–25%of the exam

Questions 16–20

16foundation · easy
You want to enable change tracking on an Azure SQL database table. Which T-SQL statement should you use?
Select an answer first
17application · medium
A multi-tenant SaaS application uses a single Azure SQL database for all tenants. Each tenant's data is identified by a 'TenantId' column. The application uses a single login for all users, but each user has a custom claim that contains their TenantId. The security team wants to ensure that users can only see rows for their own tenant. What should the administrator implement?
Select an answer first
18application · medium
A healthcare company stores patient email addresses in an Azure SQL database. The compliance team requires that support staff who query the database see masked email addresses, while the billing team must see full addresses. The database administrator has already classified the email column as 'Confidential'. Which two actions should the administrator take to meet the requirement with the least administrative overhead?
Select an answer first
19foundation · easy
You need to restrict access to rows in an Azure SQL database table so that users only see rows belonging to their department. Which feature should you implement?
Select an answer first
20foundation · easy
You are implementing dynamic data masking on an Azure SQL database. Which T-SQL statement adds a masking function to a column?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DP-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “DP-300” is a trademark of its owner, used for identification only.

Implement Compliance Controls for Sensitive Data DP-300 Practice Questions (Page 4)

Questions 16–20

You want to enable change tracking on an Azure SQL database table. Which T-SQL statement should you use?

You need to restrict access to rows in an Azure SQL database table so that users only see rows belonging to their department. Which feature should you implement?

You are implementing dynamic data masking on an Azure SQL database. Which T-SQL statement adds a masking function to a column?

Keep studying — Implement a secure environment