DP-300 Certification Practice Question #88

Question

You have an Azure SQL database named DB1 that contains a table named Orders. The Orders table contains a row for each sales order. Each sales order includes the name of the user who placed the order.

You need to implement row-level security (RLS). The solution must ensure that the users can view only their respective sales orders.

What should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

Row-Level Security (RLS) in Azure SQL Database is implemented using two components: (1) a **security policy** that ties a filter predicate to a table, and (2) an **inline table-valued function** that evaluates whether a row should be visible to the current user. The security policy is created with `CREATE SECURITY POLICY` referencing the TVF as its filter predicate. This is directly confirmed by MS Learn documentation on RLS and by the community consensus.

More DP-300 practice questions