DP-200 Azure Data Security and Compliance

Question 1

Which Azure feature allows you to classify and label sensitive data in Azure SQL Database and Azure Synapse Analytics?

Accepted Answer

Data Discovery & Classification

Answer

Data Discovery & Classification scans databases to identify, label, and report on columns containing sensitive data like PII or financial information.

Question 2

What does Transparent Data Encryption (TDE) protect in Azure SQL Database?

Accepted Answer

Data at rest by encrypting database files, backups, and transaction logs

Answer

TDE encrypts the entire database at the storage level, protecting data files, backups, and transaction logs at rest.

Question 3

Which Azure SQL Database feature allows encrypting specific sensitive columns so that data is only decrypted by authorized client applications?

Accepted Answer

Always Encrypted

Answer

Always Encrypted ensures that sensitive column data is encrypted at the client and never exposed in plaintext to the database engine or DBAs.

Question 4

What does Azure SQL Dynamic Data Masking do?

Accepted Answer

Limits exposure of sensitive data by masking it for non-privileged users in query results

Answer

Dynamic Data Masking obscures sensitive column values (e.g., showing XXXX-1234 for credit card numbers) in query results for non-privileged users.

Question 5

Which mechanism in Azure Data Lake Storage Gen2 allows you to grant a service principal read access to a specific directory without granting access to the entire storage account?

Accepted Answer

POSIX ACLs

Answer

POSIX ACLs in ADLS Gen2 allow granular, directory- and file-level permissions to be assigned to service principals and users.

DP-200 - Microsoft Azure Data Solutions Practice Test

DP-200 - Microsoft Azure Data Solutions Practice Test

DP-200 Azure Data Security and Compliance