DP-200 Azure Data Security and Compliance 2

Question 1

What is the purpose of Azure Private Endpoint for Azure Storage?

Accepted Answer

To provide a private IP within your VNet for secure access to storage without traversing the public internet

Answer

To enable public internet access to storage

Answer

To accelerate CDN delivery of static assets

Answer

To replicate storage across regions

Question 2

Which Azure service provides centralized audit logging for data access and queries across Azure SQL Database and Azure Synapse Analytics?

Accepted Answer

Azure SQL Auditing

Answer

Azure Monitor Logs

Answer

Microsoft Sentinel

Answer

Azure Service Health

Question 3

What is Microsoft Purview (formerly Azure Purview) primarily used for in a data platform context?

Accepted Answer

Unified data governance, cataloging, and lineage tracking across hybrid data sources

Answer

Real-time stream processing

Answer

Database backup and restore

Answer

ETL pipeline orchestration

Question 4

In the context of DP-200, what does Azure Managed Identity enable when accessing Azure Key Vault or ADLS Gen2 from a data service?

Accepted Answer

Passwordless authentication using an Azure AD identity assigned to the service

Answer

Encrypted data transfer using TLS 1.3

Answer

Multi-factor authentication for service accounts

Answer

Automatic key rotation for storage account keys

Question 5

Which Azure Key Vault object type is used to store and manage symmetric or asymmetric cryptographic keys for data encryption?

Accepted Answer

Keys

Answer

Secrets

Answer

Certificates

Answer

Policies

Question 6

What Azure feature enables you to define and enforce policies that require all Azure SQL Databases in a subscription to have TDE enabled?

Accepted Answer

Azure Policy

Answer

Azure Blueprints

Answer

Microsoft Defender for SQL

Answer

Azure Security Center Recommendations