You have an Azure SQL database named DB1.A user named User1 has a Microsoft Entra account.You need to provide User1 with the ability to add and remove columns from the tables in DB1. The solution must use the principle of least privilege.Which two actions should you perform? Each correct answer presents part of the solution.Note: Each correct selection is worth one point.
Answer(s): B,D
HOTSPOT (Drag and Drop is not supported)You have an Azure SQL database named DB1 that contains a table named Orders. The Orders table contains a row for each sales order. Each sales order includes the name of the user who placed the order.You need to implement row-level security (RLS). The solution must ensure that the users can view only their respective sales orders.What should you include in the solution? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: A security policy in the Orders tableImplement RLS by using the CREATE SECURITY POLICY Transact-SQL statement, and predicates created as inline table-valued functions.Box 2: A table-valued functionAccess to row-level data in a table is restricted by a security predicate defined as an inline table-valued function. The function is then invoked and enforced by a security policy.
https://docs.microsoft.com/en-us/sql/relational-databases/security/row-level-security
DRAG DROP (Drag and Drop is not supported)You have an Azure subscription that contains an Azure SQL database named SQLDb1. SQLDb1 contains a table named Table1.You plan to deploy an Azure web app named webapp1 that will export the rows in Table1 that have changed.You need to ensure that webapp1 can identify the changes to Table1. The solution must meet the following requirements:Minimize compute times.Minimize storage.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and Place:
Step 1: Connect to SQLDB1 and run the following Transact-SQL statement ALTER DATABASE SQLDb1 SET CHANGE_TRACKING - ONBefore you can use change tracking, you must enable change tracking at the database level.The following example shows how to enable change tracking by using ALTER DATABASE.ALTER DATABASE AdventureWorks2012SET CHANGE_TRACKING = ON(CHANGE_RETENTION = 2 DAYS, AUTO_CLEANUP = ON)Step 2: Connect to SQLDB1 and run the following Transact-SQL statement ALTER TABLE dbo.Table1 ENABLE CHANGE TRACKINGEnable Change Tracking for a TableChange tracking must be enabled for each table that you want tracked. When change tracking is enabled, change tracking information is maintained for all rows in the table that are affected by a DML operation.The following example shows how to enable change tracking for a table by using ALTER TABLE.ALTER TABLE Person.ContactENABLE CHANGE_TRACKINGWITH (TRACK_COLUMNS_UPDATED = ON)Step 3: From webapp1, connect to SQLDb1, obtain the initial dataset, and run the CHANGETABLE() function.Obtain changes by using change tracking functionsThe CHANGETABLE function is used to obtain change tracking information. This rowset function is used to query for change information. The function queries the data stored in the internal change tracking tables. The function returns a results set that contains the primary keys of rows that have changed together with other change information such as the operation, columns updated and version for the row.Incorrect:* CHANGE_TRACKING_CURRENT_VERSION() function
https://docs.microsoft.com/en-us/sql/relational-databases/track-changes/enable-and-disable- change-tracking-sql-server https://docs.microsoft.com/en-us/sql/relational-databases/track-changes/work-with-change-tracking-sql-server
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that is linked to a Microsoft Entra tenant named contoso.com The subscription contains an Azure SQL database named SQL1 and an Azure web app named app1. App1 has the managed identity feature enabled.You need to create a new database user for app1.How should you complete the Transact-SQL statement? To answer select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Box 1: [App1]Connect to SQL Database from .NET App Service without secrets using a managed identity In the SQL prompt for the database you want, run the following commands to grant the minimum permissions your app needs. For example,CREATE USER [<identity-name>] FROM EXTERNAL PROVIDER;ALTER ROLE db_datareader ADD MEMBER [<identity-name>];ALTER ROLE db_datawriter ADD MEMBER [<identity-name>];ALTER ROLE db_ddladmin ADD MEMBER [<identity-name>];<identity-name> is the name of the managed identity in Microsoft Entra ID. If the identity is system-assigned, the name is always the same as the name of your App Service app.Box 2: EXTERNAL PROVIDER
https://docs.microsoft.com/en-us/azure/app-service/tutorial-connect-msi-sql-database
DRAG DROP (Drag and Drop is not supported)You have an Azure subscription that contains an Azure SQL database named DB1.You plan to perform a classification scan of DB1 by using Azure Purview.You need to ensure that you can register DB1.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and Place:
Step 1: Create a Purview account.PrerequisitesAn Azure account with an active subscription. Create an account for free.An active Microsoft Purview account.You'll need to be a Data Source Administrator and Data Reader to register a source and manage it in the Microsoft Purview governance portal.Step 2: Modify the Access control (IAM) settings for DB1.A collection is a tool that the Microsoft Purview Data Map uses to group assets, sources, and other artifacts into a hierarchy for discoverability and to manage access control. All accesses to the Microsoft Purview governance portal's resources are managed from collections in the Microsoft Purview Data MapStep 3: Create a system-assigned managed identity.Authentication for a scanTo scan your data source, you'll need to configure an authentication method in the Azure SQL Database.The following options are supported:* System-assigned managed identity (Recommended) - This is an identity associated directly with your Microsoft Purview account that allows you to authenticate directly with other Azure resources without needing to manage a go-between user or credential set.* Etc.
https://docs.microsoft.com/en-us/azure/purview/register-scan-azure-sql-database
Post your Comments and Discuss Microsoft DP-300 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the DP-300 content, but please register or login to continue.