View Full Microsoft DP-800 Exam Dumps and Practice Test Dumps.

 

Question 81

Which Azure feature can restrict access to an Azure SQL Database by allowing only specified IP addresses?

1. Azure SQL firewall rules
2. Azure Storage lifecycle rules
3. Azure DNS zones
4. Azure Load Balancer rules

Correct Answer: 1

Explanation

Azure SQL firewall rules control which IP addresses can connect to an Azure SQL Database endpoint. Administrators can configure server-level or database-level firewall rules depending on the required access model. This provides a network-level access control layer before authentication occurs. Firewall rules should be configured as narrowly as practical rather than allowing unrestricted internet access. For stronger network isolation, organizations can also consider private connectivity options such as Azure Private Link.

Question 82

Which authentication method allows users to authenticate to Azure SQL using identities managed by Microsoft Entra ID?

1. Windows local authentication
2. Microsoft Entra authentication
3. FTP authentication
4. Anonymous authentication

Correct Answer: 2

Explanation

Microsoft Entra authentication allows Azure SQL resources to authenticate users and applications through Microsoft Entra ID. This can provide centralized identity management and supports authentication methods such as passwords, multifactor authentication, and managed identities depending on the scenario. Using Microsoft Entra authentication can reduce reliance on traditional SQL usernames and passwords. Administrators must configure the appropriate Microsoft Entra administrator and database principals before users or applications can connect successfully.

Question 83

Which Azure networking feature provides a private IP address for accessing Azure SQL Database from a virtual network?

1. Public IP address
2. Private Endpoint
3. Network Security Group only
4. Azure DNS Public Zone

Correct Answer: 2

Explanation

An Azure Private Endpoint provides private connectivity to supported Azure services by assigning a private IP address from an Azure virtual network. For Azure SQL Database, this allows clients in connected networks to access the database without relying on its public endpoint. Private connectivity can reduce exposure to the public internet and is useful for applications with strict network security requirements. DNS configuration is also important so that clients resolve the database name correctly to the private endpoint.

Question 84

Which Azure feature can provide secure private connectivity between an Azure virtual network and an Azure PaaS service?

1. Private Link
2. Azure CDN
3. Azure Traffic Manager
4. Azure Front Door

Correct Answer: 1

Explanation

Azure Private Link provides private connectivity to supported Azure services through private endpoints. Traffic between the virtual network and the service can remain on the Azure backbone instead of using a public endpoint. Private Link is commonly used when organizations need stronger network isolation for services such as Azure SQL Database. Administrators should also configure DNS and access permissions correctly because creating a private endpoint alone does not automatically solve every connectivity or authorization requirement.

Question 85

Which SQL Server feature encrypts the database files at rest without requiring application changes?

1. Dynamic Data Masking
2. Transparent Data Encryption
3. Row-Level Security
4. SQL Server Agent

Correct Answer: 2

Explanation

Transparent Data Encryption, or TDE, encrypts database files at rest to help protect stored data if the underlying storage is accessed without authorization. It operates transparently to applications, meaning applications generally do not need to be modified to use an encrypted database. TDE protects data at rest but does not replace authentication, authorization, or network security. Administrators should use TDE as one part of a broader database security strategy.

Question 86

Which SQL Server security feature hides sensitive column values from users who should not see the complete data?

1. Dynamic Data Masking
2. Database mirroring
3. Index compression
4. Query Store

Correct Answer: 1

Explanation

Dynamic Data Masking can obscure sensitive data returned to users who do not have permission to view the full values. For example, a phone number or email address can be partially masked when returned to certain users. The underlying data remains unchanged in the database. Dynamic Data Masking should not be considered encryption or a replacement for authorization because privileged users may still access the original values. It is mainly useful for limiting unnecessary exposure of sensitive information.

Question 87

Which SQL Server security feature restricts which rows a user can access in a table?

1. Transparent Data Encryption
2. Row-Level Security
3. Data compression
4. Query Store

Correct Answer: 2

Explanation

Row-Level Security, or RLS, allows SQL Server to control access to individual rows based on the user’s identity or execution context. For example, a company could allow regional managers to see only records belonging to their assigned region. RLS uses security predicates to determine which rows are visible or modifiable. This provides fine-grained data access control while allowing multiple users or departments to work with the same underlying table.

Question 88

Which Microsoft service helps detect suspicious activity and security threats affecting Azure SQL databases?

1. Microsoft Defender for SQL
2. Azure DNS
3. Azure Cost Management
4. Azure Storage Explorer

Correct Answer: 1

Explanation

Microsoft Defender for SQL provides security capabilities designed to help identify threats and security weaknesses in SQL environments. It can provide security recommendations, alerts, and assessments that help administrators improve database protection. It can be used with supported Azure SQL services and SQL Server environments. Defender for SQL complements other controls such as authentication, authorization, encryption, firewall rules, and auditing. It should be viewed as part of a layered database security strategy.

Question 89

Which Azure service can collect database metrics and logs for monitoring and analysis?

1. Azure Monitor
2. Azure Key Vault
3. Azure DNS
4. Azure Policy only

Correct Answer: 1

Explanation

Azure Monitor collects and analyzes telemetry from Azure resources, including supported database services. Administrators can use metrics to monitor resource utilization and configure alerts for important conditions. Logs can also be collected and analyzed through Log Analytics when the appropriate diagnostic settings are configured. Azure Monitor helps database administrators identify performance problems, availability issues, and unusual activity. Monitoring should be configured proactively rather than waiting until users report database problems.

Question 90

Which Azure component is commonly used to store and query collected resource logs?

1. Log Analytics workspace
2. Azure Load Balancer
3. Azure DNS zone
4. Azure Firewall policy only

Correct Answer: 1

Explanation

A Log Analytics workspace stores and provides querying capabilities for logs collected through Azure Monitor and other supported services. Administrators can use Kusto Query Language, or KQL, to analyze log data and investigate events. For database administration, Log Analytics can help correlate database activity with other Azure resources and infrastructure events. Diagnostic settings generally determine which logs or metrics are sent to the workspace, so correct configuration is important.

Question 91

Which language is commonly used to query data stored in Azure Monitor Logs?

1. T-SQL
2. KQL
3. Python
4. HTML

Correct Answer: 2

Explanation

Kusto Query Language, or KQL, is used to query and analyze data stored in Azure Monitor Logs and Log Analytics. KQL is designed for working with large volumes of telemetry, event, and log data. Database administrators can use it to investigate performance problems, identify patterns, and create monitoring queries. T-SQL is primarily used for relational database operations, while KQL is focused on analyzing telemetry and log information.

Question 92

Which SQL Server feature stores query execution plans and runtime statistics to help identify performance regressions?

1. Query Store
2. SQL Server Browser
3. Database Mail
4. SQL Server Agent

Correct Answer: 1

Explanation

Query Store collects information about queries, execution plans, and runtime statistics over time. It allows administrators to compare query performance and identify cases where a query becomes slower after a plan change. Query Store is especially useful for troubleshooting performance regressions because it provides historical information rather than showing only the current execution. Administrators can use Query Store data to investigate problematic queries and evaluate plan-related performance issues.

Question 93

What is a common purpose of SQL Server statistics?

1. Store user passwords
2. Help the query optimizer estimate data distribution
3. Encrypt database files
4. Schedule database backups

Correct Answer: 2

Explanation

SQL Server statistics contain information about the distribution of values in columns or indexes. The query optimizer uses this information when estimating how many rows a query will return. Accurate estimates can help the optimizer select efficient execution plans. Outdated statistics can sometimes lead to poor cardinality estimates and inefficient plans. Administrators should monitor statistics and use appropriate maintenance strategies, especially for databases where data changes frequently.

Question 94

Which operation can update statistics for a SQL Server table?

1. UPDATE STATISTICS
2. UPDATE DATABASE
3. ALTER LOGIN
4. CREATE FIREWALL

Correct Answer: 1

Explanation

The UPDATE STATISTICS statement updates statistics for a table or index so that SQL Server has more current information about data distribution. Updated statistics can help the query optimizer make better decisions when creating execution plans. SQL Server can also update statistics automatically when the appropriate database settings are enabled. However, highly active or large databases may still require careful statistics maintenance. Administrators should investigate query performance before applying unnecessary maintenance operations.

Question 95

Which SQL Server command can be used to check the logical and physical integrity of a database?

1. DBCC CHECKDB
2. DBCC LOGIN
3. CHECK DATABASE USER
4. VERIFY SERVER

Correct Answer: 1

Explanation

DBCC CHECKDB checks the logical and physical integrity of a SQL Server database. It can identify problems involving database structures, allocation, indexes, and other internal consistency issues. Running integrity checks is an important part of database maintenance and recovery planning. Administrators should understand the resource requirements and scheduling implications before running checks on large production databases. Results should be reviewed carefully, especially when corruption is reported.

Question 96

Which SQL Server command can display information about database configuration and objects?

1. sp_help
2. sp_delete
3. sp_backupall
4. sp_firewall

Correct Answer: 1

Explanation

sp_help is a system stored procedure that can return information about database objects such as tables, columns, indexes, and other object properties. It is useful when administrators need a quick overview of an object’s structure from within SQL Server. For more detailed or specialized administration, system catalog views and dynamic management views may provide additional information. Administrators should understand which source provides the most appropriate information for the troubleshooting task.

Question 97

Which database object is commonly used to store reusable SQL code that accepts parameters and can return results?

1. Stored procedure
2. Database file
3. Index
4. Constraint

Correct Answer: 1

Explanation

A stored procedure is a database object that contains reusable SQL statements and can accept input parameters. Stored procedures are commonly used to centralize business or administrative logic and can help control access to underlying tables. They can perform queries, insertions, updates, and other database operations. Using stored procedures can also simplify application interaction with a database because applications can call a defined procedure rather than sending complex SQL statements directly.

Question 98

Which SQL Server object provides a virtual table based on a query?

1. View
2. Trigger
3. Index
4. Constraint

Correct Answer: 1

Explanation

A view is a database object that presents the results of a query as a virtual table. Views can simplify complex queries, provide a consistent interface for applications, and help restrict direct access to underlying tables. A view normally does not store a separate copy of the query results. Instead, SQL Server evaluates the view definition when it is queried, subject to the view’s design and optimization. Views can also improve code reuse and maintainability.

Question 99

Which SQL Server feature can automatically execute code when an INSERT, UPDATE, or DELETE operation occurs on a table?

1. Trigger
2. View
3. Index
4. Database role

Correct Answer: 1

Explanation

A trigger is a database object that can automatically execute in response to specified data modification events. For example, a trigger can run after an INSERT, UPDATE, or DELETE operation. Triggers can be useful for enforcing certain business rules, recording audit information, or maintaining related data. However, excessive trigger logic can make database behavior difficult to understand and may affect performance. Administrators should use triggers carefully and document their purpose.

Question 100

Which Azure SQL capability allows an administrator to restore a database to an earlier point in time after accidental data changes?

1. Point-in-time restore
2. Dynamic Data Masking
3. Query Store
4. Index rebuild

Correct Answer: 1

Explanation

Point-in-time restore allows an Azure SQL database to be restored to a specific earlier time within the available backup retention period. This can be useful after accidental deletion, incorrect updates, or other data-changing incidents. The restored database is generally created as a separate database rather than simply overwriting the existing one. Administrators should understand the configured retention period and recovery requirements before relying on point-in-time restore as part of a disaster recovery strategy.