You have an Azure virtual machine named VM1 on a virtual network named VNet1. Outbound traffic from VM1 to the internet is blocked.You have an Azure SQL database named SqlDb1 on a logical server named SqlSrv1.You need to implement connectivity between VM1 and SqlDb1 to meet the following requirements:Ensure that VM1 cannot connect to any Azure SQL Server other than SqlSrv1.Restrict network connectivity to SqlSrv1.What should you create on VNet1?
Answer(s): C
Azure Private Link enables you to access Azure PaaS Services (for example, Azure Storage and SQL Database) and Azure hosted customer-owned/partner services over a private endpoint in your virtual network.Traffic between your virtual network and the service travels the Microsoft backbone network. Exposing your service to the public internet is no longer necessary.
https://docs.microsoft.com/en-us/azure/private-link/private-link-overview
You are developing an application that uses Azure Data Lake Storage Gen 2.You need to recommend a solution to grant permissions to a specific application for a limited time period.What should you include in the recommendation?
A shared access signature (SAS) provides secure delegated access to resources in your storage account.With a SAS, you have granular control over how a client can access your data. For example:What resources the client may access.What permissions they have to those resources.How long the SAS is valid.Note: Data Lake Storage Gen2 supports the following authorization mechanisms:Shared Key authorizationShared access signature (SAS) authorizationRole-based access control (Azure RBAC)Access control lists (ACL) Data Lake Storage Gen2 supports the following authorization mechanisms:Shared Key authorizationShared access signature (SAS) authorizationRole-based access control (Azure RBAC)Access control lists (ACL)
https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview
You are designing an enterprise data warehouse in Azure Synapse Analytics that will contain a table named Customers. Customers will contain credit card information.You need to recommend a solution to provide salespeople with the ability to view all the entries in Customers. The solution must prevent all the salespeople from viewing or inferring the credit card information.What should you include in the recommendation?
Answer(s): D
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that is linked to a hybrid Microsoft Entra tenant. The subscription contains an Azure Synapse Analytics SQL pool named Pool1.You need to recommend an authentication solution for Pool1. The solution must support multi-factor authentication (MFA) and database-level authentication.Which authentication solution or solutions should you include in the recommendation? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: Microsoft Entra authenticationMicrosoft Entra authentication supports Multi-Factor authentication through Active Directory Universal Authentication.Box 2: Contained database usersMicrosoft Entra uses contained database users to authenticate identities at the database level.Incorrect:SQL authentication: To connect to dedicated SQL pool (formerly SQL DW), you must provide the following information:Fully qualified servernameSpecify SQL authenticationUsernamePasswordDefault database (optional)
https://docs.microsoft.com/en-us/azure/synapse-analytics/sql-data-warehouse/sql-data-warehouse- authentication
You have a data warehouse in Azure Synapse Analytics.You need to ensure that the data in the data warehouse is encrypted at rest.What should you enable?
Transparent data encryption (TDE) helps protect Azure SQL Database, Azure SQL Managed Instance, and Azure Synapse Analytics against the threat of malicious offline activity by encrypting data at rest.
https://docs.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-tde-overview
Post your Comments and Discuss Microsoft DP-300 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the DP-300 content, but please register or login to continue.