View Full Microsoft DP-800 Exam Dumps and Practice Test Dumps.

 

Question 341

Which connection policy can reduce connection latency for Azure SQL Database clients by sending traffic directly to the database after the initial connection?

1. Proxy
2. Redirect
3. Offline
4. Tunnel

Correct Answer: 2

Explanation

The Redirect connection policy allows Azure SQL Database clients to establish the initial connection through the gateway and then connect directly to the database. This can provide lower latency and better throughput compared with the Proxy policy in suitable environments. The network configuration must allow the required outbound connectivity for redirected connections. Administrators should consider firewall rules, network security controls, and client compatibility when choosing the appropriate connection policy for an Azure SQL Database workload.

Question 342

Which TCP port is commonly used for SQL Server connections to Azure SQL Database?

1. 80
2. 443
3. 1433
4. 3389

Correct Answer: 3

Explanation

TCP port 1433 is the standard port used for SQL Server database connections, including connections to Azure SQL Database through its database gateway. Network administrators may need to allow outbound traffic to this port depending on the organization’s firewall configuration. Azure SQL Database can also use different ports internally for redirected connections, so network requirements should be reviewed when using redirect connectivity. Port 1433 should not be confused with HTTPS port 443 or Remote Desktop port 3389.

Question 343

Which Azure SQL Database feature allows administrators to restrict access based on the client IP address?

1. Firewall rules
2. Query Store
3. Resource Governor
4. Temporal tables

Correct Answer: 1

Explanation

Azure SQL Database firewall rules allow administrators to control which public IP addresses can connect to the logical server or database. Server-level firewall rules can apply to databases under the logical server, while database-level firewall rules provide more specific control. Firewall rules are useful for restricting public network access to known client locations. However, administrators should consider private endpoints when stronger private network connectivity is required instead of relying only on public IP filtering.

Question 344

Which Azure feature provides a private IP address for accessing an Azure SQL Database without using its public endpoint?

1. Azure Firewall
2. Private Endpoint
3. Azure Advisor
4. Network Watcher

Correct Answer: 2

Explanation

An Azure Private Endpoint assigns a private IP address from an Azure virtual network to access an Azure service privately. For Azure SQL Database, this allows clients in connected networks to communicate with the database through private connectivity rather than the public endpoint. Administrators typically configure DNS correctly so the SQL server hostname resolves to the private address. Private endpoints are useful when organizations want to reduce exposure to public network access and integrate database access with private network architectures.

Question 345

Which DNS configuration is important when clients access Azure SQL Database through a private endpoint?

1. Resolving the database hostname to the private endpoint IP
2. Resolving the hostname to 127.0.0.1
3. Removing the database hostname
4. Resolving the hostname only through an external public DNS server

Correct Answer: 1

Explanation

When Azure SQL Database is accessed through a private endpoint, DNS resolution should direct the database hostname to the private endpoint’s IP address. Azure Private DNS zones are commonly used to provide the required name resolution within connected virtual networks. If DNS is incorrectly configured, a client may resolve the hostname to a public address and fail to use the intended private connection. Administrators should verify both DNS resolution and network routing when troubleshooting private endpoint connectivity.

Question 346

Which Azure SQL Database authentication method uses Microsoft Entra identities instead of SQL usernames and passwords?

1. Microsoft Entra authentication
2. SQL authentication
3. Windows local authentication
4. FTP authentication

Correct Answer: 3

Explanation

Microsoft Entra authentication allows Azure SQL Database users and applications to authenticate using Microsoft Entra identities. This can improve security by reducing dependence on database passwords and enabling centralized identity management. Administrators can create Microsoft Entra-based database users and assign appropriate permissions through database roles. Managed identities can also be used by supported Azure resources to access databases without storing credentials in application configuration.

Question 347

Which identity type allows an Azure service to authenticate to Azure SQL Database without storing a password in application code?

1. Managed identity
2. Guest account
3. Local administrator
4. SQL login

Correct Answer: 1

Explanation

A managed identity provides an Azure resource with an identity managed by Microsoft Entra ID. Applications can use that identity to authenticate to supported services, including Azure SQL Database, without storing a password or secret in application code. Administrators can grant the managed identity only the database permissions it requires. This reduces credential-management overhead and helps prevent secrets from being accidentally exposed in source code, configuration files, or deployment pipelines.

Question 348

Which database user type can exist inside an Azure SQL Database without requiring a traditional server-level login?

1. Contained database user
2. Windows local user
3. Operating system account
4. SQL Server Agent user

Correct Answer: 1

Explanation

A contained database user is defined within the database and does not depend on a traditional server-level login in the same way as a mapped SQL login. This makes contained users useful for Azure SQL Database and for scenarios where database portability is important. Microsoft Entra users can also be created as contained database users. Administrators can assign permissions or database-role memberships directly to these users while keeping their security scope within the database.

Question 349

Which database object is best suited for grouping related tables and controlling permissions across those objects?

1. Schema
2. Index
3. Trigger
4. Statistic

Correct Answer: 1

Explanation

A schema provides a logical namespace for database objects and can also serve as a convenient security boundary. Instead of granting permissions separately on many tables and procedures, administrators can grant permissions at the schema level. This simplifies security administration and makes permission management easier as applications grow. For example, an application schema can contain related procedures and tables, while a database role receives only the permissions required on that schema.

Question 350

What is the primary benefit of granting permissions at the schema level?

1. It automatically encrypts all data
2. It simplifies permission management for multiple objects
3. It removes the need for database users
4. It automatically creates indexes

Correct Answer: 2

Explanation

Schema-level permissions simplify administration by allowing a permission to apply to multiple objects within a schema. Instead of granting SELECT or EXECUTE separately on many objects, an administrator can grant the required permission at the schema level. This is especially useful for applications with many database objects. Schema-level permissions can also support least privilege by separating application objects into logical groups and assigning access only to the schemas required by specific users or roles.

Question 351

Which SQL Server feature allows code to run under the security context of a specified user?

1. EXECUTE AS
2. SELECT AS
3. RUN USER
4. LOGIN AS

Correct Answer: 1

Explanation

EXECUTE AS allows certain T-SQL modules or sessions to execute under a specified security context. It can be useful when a stored procedure needs to perform an operation using permissions associated with another principal. Administrators must use this feature carefully because changing execution context can affect authorization behavior. Security design should ensure that procedures cannot be abused to perform actions beyond the intended permissions of the application or user.

Question 352

Which concept allows a user to access data through a stored procedure without receiving direct permission on the underlying table in some designs?

1. Ownership chaining
2. Data compression
3. Partition elimination
4. Index fragmentation

Correct Answer: 4

Explanation

Ownership chaining can allow a user to execute a stored procedure that accesses underlying objects without requiring separate direct permissions on those objects when the ownership chain conditions are satisfied. This can be useful for implementing controlled access through stored procedures. Administrators should understand object ownership and cross-database boundaries because ownership chaining does not apply identically in every situation. Proper testing is important to ensure that users receive only the intended level of access.

Question 353

Which Azure service can store and protect database encryption keys and other application secrets?

1. Azure Key Vault
2. Azure Monitor
3. Azure Advisor
4. Azure Cost Management

Correct Answer: 1

Explanation

Azure Key Vault provides secure storage and management for secrets, keys, and certificates. It can be integrated with Azure services and applications that need access to cryptographic material or sensitive configuration information. Using Key Vault helps reduce the need to store secrets directly in application code or configuration files. Administrators should also use appropriate access policies or role-based access control and regularly review which identities are allowed to access sensitive Key Vault resources.

Question 354

Which Azure service can collect platform logs and metrics from Azure SQL resources?

1. Azure Monitor
2. Azure DevOps
3. Azure DNS
4. Azure Bastion

Correct Answer: 1

Explanation

Azure Monitor collects and analyzes metrics and logs from Azure resources, including Azure SQL services. Administrators can use Azure Monitor to observe resource health, performance, availability, and operational activity. Diagnostic settings can be configured to send supported resource logs and metrics to destinations such as Log Analytics workspaces. Monitoring helps administrators identify performance problems, capacity issues, and unusual activity before they significantly affect applications.

Question 355

Which Azure Monitor destination is commonly used to store and query diagnostic logs using KQL?

1. Storage account
2. Log Analytics workspace
3. Azure DNS zone
4. Key Vault

Correct Answer: 2

Explanation

A Log Analytics workspace is a central location for collecting and querying supported Azure resource logs. Administrators can use Kusto Query Language (KQL) to analyze the collected information and build queries for troubleshooting and monitoring. Azure SQL diagnostic settings can send supported logs to a Log Analytics workspace. Centralized log collection is useful when administrators need to correlate database activity with events from other Azure resources.

Question 356

Which language is commonly used to query data stored in an Azure Log Analytics workspace?

1. T-SQL
2. KQL
3. PowerShell SQL
4. JSON

Correct Answer: 2

Explanation

Kusto Query Language (KQL) is used to query and analyze data in services such as Azure Monitor Logs and Log Analytics. It is designed for working with large volumes of telemetry, logs, and operational data. Administrators can use KQL to filter records, summarize metrics, identify trends, and investigate incidents. T-SQL is designed primarily for relational database operations, while KQL is optimized for telemetry and log-analysis scenarios.

Question 357

Which Azure feature can enforce organizational rules such as requiring specific configurations on Azure resources?

1. Azure Policy
2. Azure Storage
3. Azure Load Balancer
4. Azure CDN

Correct Answer: 1

Explanation

Azure Policy helps organizations enforce and assess resource configuration requirements. Administrators can create or assign policies that check whether resources comply with organizational standards. Policies can be used to audit configurations or, depending on the policy effect, help enforce desired settings. For database environments, Azure Policy can support governance by ensuring resources follow required security, networking, tagging, or configuration standards across subscriptions and resource groups.

Question 358

Which Azure feature is primarily used to organize resources into a manageable container for administration and access control?

1. Resource group
2. Availability set
3. Private endpoint
4. Log Analytics query

Correct Answer: 3

Explanation

A resource group is a logical container for related Azure resources. Administrators can manage permissions, policies, deployments, and resource lifecycle operations at the resource-group scope. For example, database-related resources and supporting services can be grouped according to an application’s environment. Resource groups do not determine where a database stores its data; they primarily provide an organizational and management boundary. Careful resource-group design can simplify administration and access control.

Question 359

Which Azure feature can help identify opportunities to improve performance, reliability, security, or cost for Azure resources?

1. Azure Advisor
2. Azure DNS
3. Azure Private Link
4. Azure Key Vault

Correct Answer: 1

Explanation

Azure Advisor analyzes Azure resource configurations and provides recommendations related to areas such as cost, performance, reliability, operational excellence, and security. Database administrators can use Advisor recommendations to identify possible improvements to their Azure SQL environments. Recommendations should be reviewed before implementation because the best configuration depends on workload requirements. Administrators should also consider application behavior and business requirements instead of applying every recommendation automatically.

Question 360

Which Azure service is used to analyze and manage spending across Azure resources?

1. Azure Monitor
2. Azure Cost Management
3. Azure Key Vault
4. Azure Policy

Correct Answer: 2

Explanation

Azure Cost Management provides tools for analyzing, monitoring, and managing Azure spending. Administrators can review costs by subscription, resource group, service, or other available dimensions and can use budgets to monitor spending against planned limits. For Azure SQL environments, cost analysis can help identify expensive resources and evaluate whether the selected service tier or purchasing model is appropriate. Cost decisions should consider performance, availability, and workload requirements rather than cost alone.