Azure Data and Application Security Flashcards
6 cards from real Microsoft Azure Security Engineer Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Azure Data and Application Security flashcards as text
Which Azure SQL Database feature obfuscates sensitive data in query results for non-privileged users without altering the actual stored values?
Answer: Dynamic Data Masking
Dynamic Data Masking replaces sensitive field values with masked output in query results for users without the UNMASK permission.
What does Azure SQL Transparent Data Encryption (TDE) protect?
Answer: Database data files, log files, and backups at rest
TDE performs real-time I/O encryption of the database file, log file, and backup files using a database encryption key.
Which Azure Storage feature generates time-limited, permission-scoped URIs that grant access to specific resources without sharing the master account key?
Answer: Shared Access Signatures (SAS)
SAS tokens encode permissions, start time, expiry, and allowed operations into a signed URI for scoped temporary access.
Which Microsoft Defender plan detects anomalous Azure Storage access patterns such as data exfiltration, access from Tor nodes, or malware uploads?
Answer: Defender for Storage
Microsoft Defender for Storage monitors blob and file access patterns and generates alerts for suspicious activities against storage accounts.
Which Azure App Service setting forces all HTTP requests to redirect to HTTPS with a 301 response code?
Answer: HTTPS Only setting
The HTTPS Only toggle in App Service Configuration automatically redirects all plaintext HTTP traffic to the HTTPS endpoint.
Which Azure SQL security feature filters the rows returned by a query based on the identity of the user executing the query?
Answer: Row-Level Security
Row-Level Security uses security predicates to filter query results to only the rows the executing user is authorized to see.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- learn.microsoft.com — Test delivery, retake policy, time limit, score validity, eligibility, renewal, exam information · verified Nov 2026