Microsoft Azure Security Engineer Certification Azure Data and Application Security 2

Question 1

Which Azure SQL Database feature obfuscates sensitive data in query results for non-privileged users without altering the actual stored values?

Accepted Answer

Dynamic Data Masking

Answer

Dynamic Data Masking replaces sensitive field values with masked output in query results for users without the UNMASK permission.

Question 2

What does Azure SQL Transparent Data Encryption (TDE) protect?

Accepted Answer

Database data files, log files, and backups at rest

Answer

TDE performs real-time I/O encryption of the database file, log file, and backup files using a database encryption key.

Question 3

Which Azure Storage feature generates time-limited, permission-scoped URIs that grant access to specific resources without sharing the master account key?

Accepted Answer

Shared Access Signatures (SAS)

Answer

SAS tokens encode permissions, start time, expiry, and allowed operations into a signed URI for scoped temporary access.

Question 4

Which Microsoft Defender plan detects anomalous Azure Storage access patterns such as data exfiltration, access from Tor nodes, or malware uploads?

Accepted Answer

Defender for Storage

Answer

Microsoft Defender for Storage monitors blob and file access patterns and generates alerts for suspicious activities against storage accounts.

Question 5

Which Azure App Service setting forces all HTTP requests to redirect to HTTPS with a 301 response code?

Accepted Answer

HTTPS Only setting

Answer

The HTTPS Only toggle in App Service Configuration automatically redirects all plaintext HTTP traffic to the HTTPS endpoint.

Microsoft Azure Security Engineer Certification Practice Test

Microsoft Azure Security Engineer Certification Practice Test

Microsoft Azure Security Engineer Certification Azure Data and Application Security 2