DP-200 Azure Data Security and Compliance

Question 1

Which Azure feature allows you to classify and label sensitive data in Azure SQL Database and Azure Synapse Analytics?

Accepted Answer

Data Discovery & Classification

Answer

Azure Policy

Answer

Microsoft Defender for Cloud

Answer

Azure Purview

Question 2

What does Transparent Data Encryption (TDE) protect in Azure SQL Database?

Accepted Answer

Data at rest by encrypting database files, backups, and transaction logs

Answer

Data in transit between client and server

Answer

Column-level data from unauthorized queries

Answer

Row-level data based on user identity

Question 3

Which Azure SQL Database feature allows encrypting specific sensitive columns so that data is only decrypted by authorized client applications?

Accepted Answer

Always Encrypted

Answer

Transparent Data Encryption (TDE)

Answer

Row-Level Security (RLS)

Answer

Dynamic Data Masking

Question 4

What does Azure SQL Dynamic Data Masking do?

Accepted Answer

Limits exposure of sensitive data by masking it for non-privileged users in query results

Answer

Encrypts data at rest

Answer

Prevents unauthorized schema changes

Answer

Audits all data access to a log

Question 5

Which mechanism in Azure Data Lake Storage Gen2 allows you to grant a service principal read access to a specific directory without granting access to the entire storage account?

Accepted Answer

POSIX ACLs

Answer

Storage account key rotation

Answer

Shared Access Signature (SAS) token

Answer

Azure Policy

Question 6

In Azure Synapse Analytics, what feature allows row-level access control so different users see only the rows they are authorized to view?

Accepted Answer

Row-level security (RLS)

Answer

Dynamic Data Masking

Answer

Column-level security

Answer

Always Encrypted