A REST API is hosted in Azure App Service and accesses an Azure SQL Database. The API uses Microsoft Entra ID authentication. You need to ensure that only the API's managed identity can access the database, not other services or users. What should you do?

Enable Azure SQL auditing and review logs for unauthorized access.

Create a database user mapped to the managed identity and grant it only the necessary permissions.

Create a SQL login with a strong password and store it in the API's connection string.

Configure the database firewall to allow only the App Service outbound IP address.

A company exposes a GraphQL endpoint for a customer portal. The endpoint queries an Azure SQL Database. Security review requires that users can only query their own customer data and that the database credentials are not exposed to the GraphQL layer. What should you implement?

Enable Dynamic Data Masking on all columns in the database.

Create a separate database user for each customer and have the GraphQL layer switch users.

Pass the user's identity to the database using SESSION_CONTEXT and implement Row-Level Security.

Use a single database login with broad SELECT permissions and rely on the GraphQL resolver to filter results.

A company runs a web application in Azure App Service that connects to Azure SQL Database. The application also calls a machine learning endpoint. Security policy requires passwordless authentication for all connections. You need to configure the application to authenticate to both the database and the ML endpoint. Which approach should you use?

Use a certificate for the database and a Managed Identity for the ML endpoint

Use a Managed Identity for the database and a service principal for the ML endpoint

Use SQL authentication for the database and an API key for the ML endpoint

Use the same Managed Identity for both the database and the ML endpoint

Microsoft Certified:SQL AI Developer Associate

Domain 2Objective 1

Implement Data Security and Compliance DP-800 Practice Questions (Page 10)

Part of the Secure, optimize, and deploy database solutions domain, which accounts for 35–40% of the DP-800 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~18–32 in this domain), expect 5–8 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

15concepts

35–40%of the exam

Questions 46–50

46application · medium
A REST API is hosted in Azure App Service and accesses an Azure SQL Database. The API uses Microsoft Entra ID authentication. You need to ensure that only the API's managed identity can access the database, not other services or users. What should you do?
Select an answer first
47foundation · easy
Which HTTP method is typically used to retrieve data from a REST endpoint without modifying it?
Select an answer first
48application · medium
A company exposes a GraphQL endpoint for a customer portal. The endpoint queries an Azure SQL Database. Security review requires that users can only query their own customer data and that the database credentials are not exposed to the GraphQL layer. What should you implement?
Select an answer first
49expert · hard
A company runs a web application in Azure App Service that connects to Azure SQL Database. The application also calls a machine learning endpoint. Security policy requires passwordless authentication for all connections. You need to configure the application to authenticate to both the database and the ML endpoint. Which approach should you use?
Select an answer first
50application · easy
A support team needs to view customer email addresses in a SQL database to assist with troubleshooting, but they should not see the full email address. Only the first character and the domain should be visible (e.g., j***@contoso.com). Which Dynamic Data Masking function should you apply to the EmailAddress column?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DP-800

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “DP-800” is a trademark of its owner, used for identification only.

Implement Data Security and Compliance DP-800 Practice Questions (Page 10)

Questions 46–50

A REST API is hosted in Azure App Service and accesses an Azure SQL Database. The API uses Microsoft Entra ID authentication. You need to ensure that only the API's managed identity can access the database, not other services or users. What should you do?

Which HTTP method is typically used to retrieve data from a REST endpoint without modifying it?

A company exposes a GraphQL endpoint for a customer portal. The endpoint queries an Azure SQL Database. Security review requires that users can only query their own customer data and that the database credentials are not exposed to the GraphQL layer. What should you implement?

Keep studying — Secure, optimize, and deploy database solutions