Practice Free DP-300 Exam Online Questions – Page 4

Question #31

SIMULATION

Task 9

You need to ensure that when non-administrative users query the SalesLT.Customer table in db1, email addresses are obscured. For example, an email address of [email protected] must appear as [email protected].

You may need to use SQL Server Management Studio and the Azure portal.

Reveal Solution Hide Solution

Correct Answer: Configure Dynamic Data Masking on the email column in:

SalesLT.Customer

The column is normally:

EmailAddress

Use the built-in masking function:

email()

Microsoft documents that Dynamic Data Masking hides sensitive data in query results for nonprivileged users without changing the stored data. The built-in email() masking function exposes

the first letter and returns the masked format [email protected], which exactly matches the requirement.

Method 1 ― SSMS / T-SQL Method

This is the fastest and most reliable method.

Step 1: Connect to db1

Open SQL Server Management Studio.

Connect to the Azure SQL logical server that hosts db1.

Open a query window against database:

db1

Step 2: Apply the email mask

Run:

ALTER TABLE [SalesLT].[Customer]

ALTER COLUMN [EmailAddress]

ADD MASKED WITH (FUNCTION = ’email()’);

This adds a Dynamic Data Masking rule to the EmailAddress column. The actual email address remains stored in the table, but users without permission to view unmasked data will see the masked value. Microsoft’s documented syntax for adding an email mask is ALTER COLUMN Email ADD MASKED WITH (FUNCTION = ’email()’).

Step 3: Verify that the column is masked

Run:

SELECT

OBJECT_SCHEMA_NAME(mc.object_id) AS schema_name, OBJECT_NAME(mc.object_id) AS table_name, c.name AS column_name,

mc.masking_function

FROM sys.masked_columns AS mc

JOIN sys.columns AS c

ON mc.object_id = c.object_id

AND mc.column_id = c.column_id

WHERE OBJECT_SCHEMA_NAME(mc.object_id) = ‘SalesLT’

AND OBJECT_NAME(mc.object_id) = ‘Customer’

AND c.name = ‘EmailAddress’;

Expected result:

schema_name SalesLT

table_name Customer

column_name EmailAddress

masking_function email()

Step 4: Test as a non-administrative user

If you have a test user, run:

EXECUTE AS USER = ‘TestUser’;

SELECT TOP (10)

EmailAddress

FROM SalesLT.Customer;

REVERT;

Expected output should look like:

[email protected]

[email protected]

[email protected]

A user with administrative privileges, db_owner, or UNMASK permission can still see the original email value. Microsoft states that users with administrative rights such as server admin, Microsoft Entra admin, and db_owner can view the original unmasked data.

Method 2 ― Azure Portal Method

Use this if the simulation expects portal configuration.

Step 1: Open db1

Sign in to the Azure portal.

Search for SQL databases.

Open database:

db1

Step 2: Open Dynamic Data Masking

From the db1 page:

Security > Dynamic Data Masking

Microsoft states that for Azure SQL Database, Dynamic Data Masking can be configured in the Azure portal from the SQL database configuration pane under Security > Dynamic Data Masking.

Step 3: Add a masking rule

Add a mask for the email column:

Setting Value

Schema SalesLT

Table Customer

Column EmailAddress

Masking field format Email

Masking function email()

Then select:

Save

The portal may show the mask type simply as:

Email

That is the correct option because it maps to the email() masking function.

Important Permission Check

Dynamic Data Masking only affects users who do not have permission to view unmasked data.

If a non-administrative user was previously granted UNMASK, remove it:

REVOKE UNMASK TO [UserName];

Or, if a role was granted UNMASK, revoke it from the role:

REVOKE UNMASK TO [RoleName];

Do not grant UNMASK to normal users. UNMASK allows users to bypass masking and see the original values. Microsoft documents that UNMASK permission controls whether users can view masked or original data.

Final Exam-Lab Action

Run this against db1:

ALTER TABLE [SalesLT].[Customer]

ALTER COLUMN [EmailAddress]

ADD MASKED WITH (FUNCTION = ’email()’);

Then verify:

SELECT

OBJECT_SCHEMA_NAME(object_id) AS schema_name,

OBJECT_NAME(object_id) AS table_name,

name AS column_name,

masking_function

FROM sys.masked_columns

WHERE OBJECT_SCHEMA_NAME(object_id) = ‘SalesLT’

AND OBJECT_NAME(object_id) = ‘Customer’

AND name = ‘EmailAddress’;

The task is complete when non-administrative users querying SalesLT.Customer.EmailAddress see masked email values such as:

[email protected]

Question #32

A company plans to use Apache Spark analytics to analyze intrusion detection data.

You need to recommend a solution to analyze network and system activity data for malicious activities and policy violations. The solution must minimize administrative efforts.

What should you recommend?

A . Azure Data Lake Storage
B . Azure Databricks
C . Azure HDInsight
D . Azure Data Factory

Reveal Solution Hide Solution

Question #33

DRAG DROP

You have an Azure subscription that contains the resources shown in the following table.

You need to back up db1 to mysqlbackups, and then restore the backup to a new database named db2 that is hosted on SQL1. The solution must ensure that db1 is backed up to a stripe set.

Which three Transact-SQL statements should you execute in sequence? To answer, move the appropriate statements from the list of statements to the answer area and arrange them in the correct order.

Reveal Solution Hide Solution

Question #34

You have an Azure subscription that contains the resources shown in the following table.

You plan louse SQLDB11 as an elastic job database to run jobs on SQlDb11 andSOtDB22.

What is the minimum number of database scoped credentials required tor the elastic jobs?

A . 1
B . 2
C . 3
D . 4

Reveal Solution Hide Solution

Question #35

HOTSPOT

You plan to deploy Instance1 by using the following script.

You need to specify the license Type and storagenedundancy parameters. The deployment must meet the availability requirements and the business requirements for DB1 and DB2.

To what should you set each parameter? To answer, select the appropriate options in the answer area.

Reveal Solution Hide Solution

Question #36

You have an Azure subscription that contains an Azure SQL managed instance named Server! You need to ensure the availability of Server1 if an Azure region fails.

What should you do?

A . Create a read only replica in a different Azure region and configure Server1 to use the replica.
B . Migrate the databases hosted on Server1 to the Hyperscale service tier and enable locally-redundant storage (LRS)
C . Create a failover group and deploy a logical server for Azure SQL Database to a different Azure region.
D . Create a failover group and deploy a new SQL managed instance to a different Azure region.

Reveal Solution Hide Solution

Question #37

You have an Azure subscription.

You need to deploy a new Azure SQL database by using Azure Command-Line Interface (CLI).

Which three parameters are required?

A)

A . Option A
B . Option B
C . Option C
D . Option D

Reveal Solution Hide Solution

Question #38

Refer to the exhibit.

You have an Azure subscription that contains an Azure SQL Database server named SQL1. SQL1 contains two databases named DB1 and DB2. You need to configure access to DB1 and DB2.

The solution must meet the following requirements:

• Ensure that DB1 can be accessed only by users in Branch1.

• Ensure that DB2 can be accessed only by users in Branch2.

Solution: You connect to the master of SQL1 and run the following command.

execute sp_set_firewall_rule ‘Allow dbl and db2 users", ‘131.107.11.0’, "131.107.11.255′

Does this meet the goal?

A . Yes
B . No

Reveal Solution Hide Solution

Question #39

HOTSPOT

You have a 50-TB Microsoft SQL Server database named DB1.

You need to reduce the time it takes to perform database consistency checks of DB1.

Which Transact-SQL command should you run? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

Reveal Solution Hide Solution

Question #40

You have an Azure SQL database.

You discover that the plan cache is full of compiled plans that were used only once.

You run the select * from sys.database_scoped_configurations Transact-SQL command and receive the results shown in the following table.

You need relieve the memory pressure.

What should you configure?

A . LEGACY_CARDINALITY_ESTIMATION
B . QUERY_OPTIMIZER_HOTFIXES
C . OPTIMIZE_FOR_AD_HOC_WORKLOADS
D . ACCELERATED_PLAN_FORCING

Reveal Solution Hide Solution

1 2 3 4 5 6 7 8 9 10 11 12 13

Exams