DP-300 Certification Practice Question #64

Question

You have a new Azure SQL database. The database contains a column that stores confidential information.
You need to track each time values from the column are returned in a query. The tracking information must be stored for 365 days from the date the query was executed.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Accepted Answer

To track when a specific column containing confidential information is queried, you must use Azure SQL Auditing combined with Data Discovery and Classification. By applying sensitivity labels to the column (D), any query returning this column is flagged as accessing sensitive data. To store these audit logs for 365 days, you must configure SQL Auditing to write to an Azure Storage account (A), as Event Hub (C) only supports a maximum retention period of 7 to 90 days. Finally, enabling Microsoft Defender for SQL (E) provides advanced SQL information protection policies and unified security monitoring, making A, D, and E the three required actions.

More DP-300 practice questions