FEFreeExamDumps.in

DP-300 Practice Questions — Page 8

You have an Azure SQL Database instance named DatabaseA on a server named Server1.

You plan to add a new user named App1 to DatabaseA and grant App1 db_datareader permissions. App1 will use SQL Server Authentication.

You need to create App1. The solution must ensure that App1 can be given access to other databases by using the same credentials.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

Question 71

You have an Azure virtual machine named VM1 on a virtual network named VNet1. Outbound traffic from VM1 to the internet is blocked.

You have an Azure SQL database named SqlDb1 on a logical server named SqlSrv1.

You need to implement connectivity between VM1 and SqlDb1 to meet the following requirements:

✑ Ensure that VM1 cannot connect to any Azure SQL Server other than SqlSrv1.

✑ Restrict network connectivity to SqlSrv1.

What should you create on VNet1?

  • A.a VPN gateway
  • B.a service endpoint
  • C.a private link ✓
  • D.an ExpressRoute gateway

You are developing an application that uses Azure Data Lake Storage Gen 2.

You need to recommend a solution to grant permissions to a specific application for a limited time period.

What should you include in the recommendation?

  • A.role assignments
  • B.account keys
  • C.shared access signatures (SAS)
  • D.Azure Active Directory (Azure AD) identities

You are designing an enterprise data warehouse in Azure Synapse Analytics that will contain a table named Customers. Customers will contain credit card information.

You need to recommend a solution to provide salespeople with the ability to view all the entries in Customers. The solution must prevent all the salespeople from viewing or inferring the credit card information.

What should you include in the recommendation?

  • A.row-level security
  • B.data masking
  • C.Always Encrypted
  • D.column-level security

You have an Azure subscription that is linked to a hybrid Azure Active Directory (Azure AD) tenant. The subscription contains an Azure Synapse Analytics SQL pool named Pool1.

You need to recommend an authentication solution for Pool1. The solution must support multi-factor authentication (MFA) and database-level authentication.

Which authentication solution or solutions should you include in the recommendation? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Question 75

You have a data warehouse in Azure Synapse Analytics.

You need to ensure that the data in the data warehouse is encrypted at rest.

What should you enable?

  • A.Transparent Data Encryption (TDE)
  • B.Advanced Data Security for this database
  • C.Always Encrypted for all columns
  • D.Secure transfer required

You are designing a security model for an Azure Synapse Analytics dedicated SQL pool that will support multiple companies.

You need to ensure that users from each company can view only the data of their respective company.

Which two objects should you include in the solution? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

  • A.a column encryption key
  • B.asymmetric keys
  • C.a function
  • D.a custom role-based access control (RBAC) role
  • E.a security policy

You have an Azure subscription that contains an Azure Data Factory version 2 (V2) data factory named df1. DF1 contains a linked service.

You have an Azure Key vault named vault1 that contains an encryption kay named key1.

You need to encrypt df1 by using key1.

What should you do first?

  • A.Disable purge protection on vault1.
  • B.Remove the linked service from df1. ✓
  • C.Create a self-hosted integration runtime.
  • D.Disable soft delete on vault1.

You have an Azure subscription that contains a server named Server1. Server1 hosts two Azure SQL databases named DB1 and DB2.

You plan to deploy a Windows app named App1 that will authenticate to DB2 by using SQL authentication.

You need to ensure that App1 can access DB2. The solution must meet the following requirements:

✑ App1 must be able to view only DB2.

✑ Administrative effort must be minimized.

What should you create?

  • A.a contained database user for App1 on DB2
  • B.a login for App1 on Server1
  • C.a contained database user from an external provider for App1 on DB2
  • D.a contained database user from a Windows login for App1 on DB2

You create five Azure SQL Database instances on the same logical server.

In each database, you create a user for an Azure Active Directory (Azure AD) user named User1.

User1 attempts to connect to the logical server by using Azure Data Studio and receives a login error.

You need to ensure that when User1 connects to the logical server by using Azure Data Studio, User1 can see all the databases.

What should you do?

  • A.Create User1 in the master database.
  • B.Assign User1 the db_datareader role for the master database.
  • C.Assign User1 the db_datareader role for the databases that User1 creates.
  • D.Grant SELECT on sys.databases to public in the master database.