A data governance team needs to identify which columns in an Azure SQL database contain personally identifiable information (PII) and then apply appropriate protections. They want to use a built-in Azure feature that scans the database and recommends classifications. After classification, they plan to mask the PII columns. What should you do first?

Enable dynamic data masking on all columns that might contain PII.

Run the SQL Vulnerability Assessment to identify PII columns.

Create a database audit specification to log access to all columns.

Use Azure SQL Data Discovery & Classification to scan and classify the columns.

You are implementing row-level security in an Azure SQL database. Which T-SQL statement do you use to create the security policy that applies a predicate to a table?

CREATE FUNCTION ... WITH SECURITY

ALTER TABLE ... ADD SECURITY PREDICATE

A company has an Azure SQL database with a 'Customer' table that includes a 'PhoneNumber' column. The compliance team requires that customer service representatives see only the last four digits of the phone number, while managers see the full number. The company also needs to audit all access to the PhoneNumber column. You need to implement a solution that meets both requirements. What should you do?

Apply a partial dynamic data masking rule to the PhoneNumber column and grant the UNMASK permission to managers.

Enable database-level auditing and create a database audit specification that includes SELECT on the Customer table.

Create a view that masks the PhoneNumber column and grant customer service reps access to the view.

Apply a default dynamic data masking rule to the PhoneNumber column and grant the UNMASK permission to managers.

Microsoft Certified:Azure Database Administrator Associate

Domain 2Objective 3

Implement Compliance Controls for Sensitive Data DP-300 Practice Questions (Page 5)

Part of the Implement a secure environment domain, which accounts for 20–25% of the DP-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 3–5 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

20–25%of the exam

Questions 21–25

21application · medium
A data governance team needs to identify which columns in an Azure SQL database contain personally identifiable information (PII) and then apply appropriate protections. They want to use a built-in Azure feature that scans the database and recommends classifications. After classification, they plan to mask the PII columns. What should you do first?
Select an answer first
22foundation · easy
You are implementing row-level security in an Azure SQL database. Which T-SQL statement do you use to create the security policy that applies a predicate to a table?
Select an answer first
23foundation · easy
You need to maintain a tamper-evident record of data changes in an Azure SQL database to meet compliance requirements. Which feature should you implement?
Select an answer first
24expert · hard
A company has an Azure SQL database with a 'Customer' table that includes a 'PhoneNumber' column. The compliance team requires that customer service representatives see only the last four digits of the phone number, while managers see the full number. The company also needs to audit all access to the PhoneNumber column. You need to implement a solution that meets both requirements. What should you do?
Select an answer first
25foundation · easy
You need to protect sensitive data in an Azure SQL database by obfuscating it for non-privileged users, while privileged users see the original data. Which feature should you use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DP-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “DP-300” is a trademark of its owner, used for identification only.

Implement Compliance Controls for Sensitive Data DP-300 Practice Questions (Page 5)

Questions 21–25

You are implementing row-level security in an Azure SQL database. Which T-SQL statement do you use to create the security policy that applies a predicate to a table?

You need to maintain a tamper-evident record of data changes in an Azure SQL database to meet compliance requirements. Which feature should you implement?

You need to protect sensitive data in an Azure SQL database by obfuscating it for non-privileged users, while privileged users see the original data. Which feature should you use?

Keep studying — Implement a secure environment