What is a common security risk specific to GraphQL APIs that should be mitigated?

Over-fetching and complex queries that can cause denial of service

A global bank is designing a new Azure SQL Database for a customer-facing application. The compliance team requires that all customer data be encrypted at rest and in transit, and that the database encryption keys be stored in a customer-managed key vault. The application will be accessed from multiple regions. You need to design the encryption strategy while minimizing performance impact. What should you recommend?

Enable TDE with a customer-managed key in Azure Key Vault and enforce TLS 1.2 for all connections.

Use Always Encrypted for all columns and store the column master key in Azure Key Vault.

Use client-side encryption with the .NET encryption library and store keys in the application configuration.

Enable Dynamic Data Masking on all columns and use a connection string with Encrypt=True.

Microsoft Certified:SQL AI Developer Associate

Domain 2Objective 1

Implement Data Security and Compliance DP-800 Practice Questions (Page 2)

Part of the Secure, optimize, and deploy database solutions domain, which accounts for 35–40% of the DP-800 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~18–32 in this domain), expect 5–8 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

15concepts

35–40%of the exam

Questions 6–10

6foundation · easy
What is a common security risk specific to GraphQL APIs that should be mitigated?
Select an answer first
7expert · hard
A global bank is designing a new Azure SQL Database for a customer-facing application. The compliance team requires that all customer data be encrypted at rest and in transit, and that the database encryption keys be stored in a customer-managed key vault. The application will be accessed from multiple regions. You need to design the encryption strategy while minimizing performance impact. What should you recommend?
Select an answer first
8foundation · easy
Which Azure feature allows a model endpoint to authenticate to Azure resources without storing credentials in code?
Select an answer first
9application · easy
A compliance team needs to track who accessed sensitive data in Azure SQL Database and when. They require a log of SELECT queries on a specific table. Which feature should you enable?
Select an answer first
10foundation · easy
Which permission is required for a user to read data from a table?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DP-800

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “DP-800” is a trademark of its owner, used for identification only.

Implement Data Security and Compliance DP-800 Practice Questions (Page 2)

Questions 6–10

What is a common security risk specific to GraphQL APIs that should be mitigated?

Which Azure feature allows a model endpoint to authenticate to Azure resources without storing credentials in code?

A compliance team needs to track who accessed sensitive data in Azure SQL Database and when. They require a log of SELECT queries on a specific table. Which feature should you enable?

Which permission is required for a user to read data from a table?

Keep studying — Secure, optimize, and deploy database solutions