DP-200 Azure Data Security and Compliance 3

Question 1

What does Microsoft Defender for SQL detect in an Azure SQL Database environment?

Accepted Answer

Anomalous database activities and potential SQL injection attacks

Answer

Network intrusion attempts from the internet

Answer

Storage account misconfigurations

Answer

Expired SSL certificates

Question 2

Which encryption option ensures Azure Cosmos DB data is encrypted both at rest and in transit?

Accepted Answer

Encryption at rest is enabled by default; in-transit uses TLS automatically

Answer

Encryption at rest is optional; in-transit uses TLS by default

Answer

Both require manual configuration using customer-managed keys

Answer

Only customer-managed keys provide encryption in Cosmos DB

Question 3

In Azure Synapse Analytics, what is the purpose of column-level security?

Accepted Answer

To restrict access to specific table columns based on user permissions using GRANT/DENY on columns

Answer

To encrypt specific columns using Always Encrypted

Answer

To mask column values for non-privileged users

Answer

To index columns for faster query performance

Question 4

What role does Azure Active Directory (Azure AD) play in securing Azure data services?

Accepted Answer

It serves as the identity provider for authentication and RBAC-based authorization to data services

Answer

It provides network-level firewall rules

Answer

It encrypts data stored in Azure Storage

Answer

It manages SSL certificates for data services

Question 5

When implementing customer-managed keys (CMK) for Azure Storage encryption, where must the keys be stored?

Accepted Answer

In Azure Key Vault or Azure Managed HSM

Answer

In Azure Blob Storage

Answer

In the storage account metadata

Answer

In Azure Active Directory

Question 6

What is the shared responsibility model implication for data security in Azure PaaS data services like Azure SQL Database?

Accepted Answer

Microsoft manages infrastructure security; the customer is responsible for data classification, access control, and encryption configuration

Answer

Microsoft is responsible for all data security including access control

Answer

The customer manages both physical hardware security and data security

Answer

Data security is entirely automated with no customer responsibility