Which authentication method allows an Azure SQL Database user to authenticate without a password by using Azure Active Directory?

Certificate-based authentication

SQL Server authentication with a strong password

Azure AD authentication with Managed Identity

A healthcare organization stores patient SSNs in an Azure SQL Database. Compliance requires that the SSN column be encrypted at rest and that application users with access to the database cannot view plaintext SSNs even if they have SELECT permission. The application connects using a service principal with a client secret. You need to implement the encryption while minimizing application code changes. What should you do?

Apply Dynamic Data Masking to the SSN column and grant the service principal UNMASK permission.

Enable Transparent Data Encryption (TDE) on the database and grant the service principal SELECT permission on the SSN column.

Create a view that uses the DECRYPTBYKEY function and grant SELECT on the view to the service principal.

Use Always Encrypted with a column master key stored in Azure Key Vault and configure the client driver to support Always Encrypted.

A REST API is deployed in Azure Kubernetes Service (AKS) and accesses an Azure SQL Database. The API uses a user-assigned managed identity. Security requires that the database connection string not contain any credentials and that all API calls be audited. What should you implement?

Use the managed identity to authenticate to Azure SQL and enable Azure SQL auditing.

Store the SQL username and password in a Kubernetes secret and reference it in the connection string.

Use Azure AD pod identity to inject a client secret into the pod.

Enable Azure SQL auditing and use a connection string with Encrypt=True.

Which security measure is essential to prevent unauthorized access to a GraphQL endpoint?

Authentication and authorization

Microsoft Certified:SQL AI Developer Associate

Domain 2Objective 1

Implement Data Security and Compliance DP-800 Practice Questions (Page 6)

Part of the Secure, optimize, and deploy database solutions domain, which accounts for 35–40% of the DP-800 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~18–32 in this domain), expect 5–8 from this objective — we provide 55 practice questions to prepare you well beyond it. (estimate)

55questions here

11free pages

15concepts

35–40%of the exam

Questions 26–30

26foundation · easy
Which masking function would you use to show only the last four digits of a credit card number, such as 'XXXX-XXXX-XXXX-1234'?
Select an answer first
27foundation · easy
Which authentication method allows an Azure SQL Database user to authenticate without a password by using Azure Active Directory?
Select an answer first
28application · medium
A healthcare organization stores patient SSNs in an Azure SQL Database. Compliance requires that the SSN column be encrypted at rest and that application users with access to the database cannot view plaintext SSNs even if they have SELECT permission. The application connects using a service principal with a client secret. You need to implement the encryption while minimizing application code changes. What should you do?
Select an answer first
29expert · hard
A REST API is deployed in Azure Kubernetes Service (AKS) and accesses an Azure SQL Database. The API uses a user-assigned managed identity. Security requires that the database connection string not contain any credentials and that all API calls be audited. What should you implement?
Select an answer first
30foundation · easy
Which security measure is essential to prevent unauthorized access to a GraphQL endpoint?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DP-800

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “DP-800” is a trademark of its owner, used for identification only.

Implement Data Security and Compliance DP-800 Practice Questions (Page 6)

Questions 26–30

Which masking function would you use to show only the last four digits of a credit card number, such as 'XXXX-XXXX-XXXX-1234'?

Which authentication method allows an Azure SQL Database user to authenticate without a password by using Azure Active Directory?

A REST API is deployed in Azure Kubernetes Service (AKS) and accesses an Azure SQL Database. The API uses a user-assigned managed identity. Security requires that the database connection string not contain any credentials and that all API calls be audited. What should you implement?

Which security measure is essential to prevent unauthorized access to a GraphQL endpoint?

Keep studying — Secure, optimize, and deploy database solutions