Azure Data Security and Compliance Flashcards

What is the purpose of Azure Private Endpoint for Azure Storage?

Answer: To provide a private IP within your VNet for secure access to storage without traversing the public internet

A Private Endpoint assigns a private IP address within your VNet to a storage account, ensuring traffic never leaves the Microsoft backbone network.

Which Azure service provides centralized audit logging for data access and queries across Azure SQL Database and Azure Synapse Analytics?

Answer: Azure SQL Auditing

Azure SQL Auditing tracks database events and writes them to an audit log in Azure Storage, Log Analytics, or Event Hubs for compliance and forensics.

What is Microsoft Purview (formerly Azure Purview) primarily used for in a data platform context?

Answer: Unified data governance, cataloging, and lineage tracking across hybrid data sources

Microsoft Purview provides a unified data governance solution with automated data discovery, cataloging, classification, and lineage visualization.

In the context of DP-200, what does Azure Managed Identity enable when accessing Azure Key Vault or ADLS Gen2 from a data service?

Answer: Passwordless authentication using an Azure AD identity assigned to the service

Managed Identity allows Azure data services to authenticate to other Azure resources without storing credentials, using an Azure AD-issued token.

Which Azure Key Vault object type is used to store and manage symmetric or asymmetric cryptographic keys for data encryption?

Answer: Keys

Azure Key Vault Keys store cryptographic key material and support operations like encrypt, decrypt, sign, and verify for data protection scenarios.

What Azure feature enables you to define and enforce policies that require all Azure SQL Databases in a subscription to have TDE enabled?

Answer: Azure Policy

Azure Policy can enforce compliance rules (like mandatory TDE) and audit or remediate non-compliant resources automatically.