{"id":11853,"date":"2026-09-14T12:36:20","date_gmt":"2026-09-14T12:36:20","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=11853"},"modified":"2026-09-14T12:36:20","modified_gmt":"2026-09-14T12:36:20","slug":"microsoft-dp-800-practice-test-questions-and-exam-dumps-part-20-q381-q400","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/microsoft-dp-800-practice-test-questions-and-exam-dumps-part-20-q381-q400\/","title":{"rendered":"Microsoft DP-800 Practice Test Questions and Exam Dumps Part 20: Q381\u2013Q400"},"content":{"rendered":"<h2><b>View Full\u00a0<a href=\"https:\/\/www.examlabs.com\/dp-800-exam-dumps\">Microsoft DP-800 Exam Dumps<\/a>\u00a0and Practice Test Dumps.<\/b><\/h2>\n<p>&nbsp;<\/p>\n<h3><b>Question 381<\/b><\/h3>\n<p><b>Which Microsoft service can help migrate SQL Server databases to Azure by providing migration assessment and guidance?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Database Migration Service<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure DNS<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Key Vault<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Advisor<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure Database Migration Service is designed to help migrate database workloads to Azure. It supports various migration scenarios and can help move supported SQL Server databases with minimal disruption depending on the migration method and target service. Administrators should assess compatibility, migration requirements, downtime expectations, and target platform capabilities before starting. Data Migration Assistant can also be used for assessment and compatibility checks as part of a broader migration process.<\/span><\/p>\n<h3><b>Question 382<\/b><\/h3>\n<p><b>Which migration approach generally moves a database schema and data as a portable package for supported Azure SQL scenarios?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">BACPAC<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DACPAC<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Query Store<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Extended Events<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A BACPAC package can contain the schema and data of a database and can be used to export and import supported databases. It is useful when administrators need a portable representation of a database for migration or transfer. A DACPAC is primarily focused on database schema rather than database data. Administrators should consider database size, downtime, compatibility, and supported target platforms when deciding whether BACPAC is an appropriate migration method.<\/span><\/p>\n<h3><b>Question 383<\/b><\/h3>\n<p><b>Which package primarily contains database schema rather than the database&#8217;s table data?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">BACPAC<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DACPAC<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">.bak<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">.trn<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A DACPAC primarily represents the schema of a database, including database objects and their definitions. It is commonly used for database deployment and DevOps workflows. A BACPAC is designed to package both schema and data for supported export and import operations. SQL Server backup files and transaction log backups serve different recovery purposes. Understanding these package types helps administrators select the correct deployment or migration method.<\/span><\/p>\n<h3><b>Question 384<\/b><\/h3>\n<p><b>Which tool can export or import a BACPAC package for supported Azure SQL Database scenarios?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SqlPackage<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">sp_who2<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DBCC CHECKDB<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SQL Server Agent<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">SqlPackage supports operations involving DACPAC and BACPAC files. For supported Azure SQL Database scenarios, it can be used to export a database into a BACPAC or import a BACPAC into a target database. This makes SqlPackage useful for scripted migration and deployment workflows. Administrators should verify compatibility and consider database size and available resources before using BACPAC-based migration for large production databases.<\/span><\/p>\n<h3><b>Question 385<\/b><\/h3>\n<p><b>Which Azure SQL Database feature can automatically adjust compute resources based on workload when configured in serverless compute?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Automatic scaling<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Row-Level Security<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Transparent Data Encryption<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">SQL Server Audit<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure SQL Database serverless compute can automatically scale compute resources within configured limits based on workload demand. It can also pause when the database is inactive if the configured auto-pause settings allow it. This model can be useful for intermittent workloads where continuous provisioned compute would be inefficient. Administrators should consider workload latency requirements, auto-pause behavior, and scaling characteristics before selecting serverless for production applications.<\/span><\/p>\n<h3><b>Question 386<\/b><\/h3>\n<p><b>Which Azure SQL Database purchasing model is based on virtual CPUs and memory rather than DTUs?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">vCore<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Basic DTU<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Standard DTU<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Database-per-user<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The vCore purchasing model represents compute resources using virtual CPU cores and provides greater visibility into compute and storage characteristics. It offers choices across different hardware and service configurations. The DTU-based purchasing model combines CPU, memory, reads, and writes into a single performance unit. Administrators often choose vCore when they need more control and clearer resource sizing or want to align Azure SQL capacity planning with existing infrastructure requirements.<\/span><\/p>\n<h3><b>Question 387<\/b><\/h3>\n<p><b>Which Azure SQL purchasing model combines CPU, memory, and I\/O resources into a single performance unit?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">vCore<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">DTU<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">BACPAC<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Hyperscale<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The DTU-based purchasing model combines several database resources, including CPU, memory, and I\/O, into a single Database Transaction Unit measure. It provides a simplified way to select a performance level without separately sizing individual compute resources. The vCore model provides more granular visibility into compute resources. Administrators should select a purchasing model based on workload requirements, pricing, scalability needs, and the level of resource control required.<\/span><\/p>\n<h3><b>Question 388<\/b><\/h3>\n<p><b>Which Azure SQL Database service tier is designed to support very large databases with independently scalable compute and storage architecture?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Hyperscale<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Basic<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Free<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Local<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The Hyperscale service tier is designed for large and demanding Azure SQL Database workloads. Its architecture separates compute from storage and provides capabilities designed to support very large databases and rapid scaling. Hyperscale can be useful when database size and growth requirements exceed what traditional service tiers are designed to handle. Administrators should evaluate application compatibility, feature requirements, performance needs, and pricing before selecting Hyperscale.<\/span><\/p>\n<h3><b>Question 389<\/b><\/h3>\n<p><b>Which Azure SQL Database feature allows multiple databases to share a pool of compute resources?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Elastic pool<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Private Endpoint<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Query Store<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Policy<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">An elastic pool allows multiple Azure SQL databases to share a common pool of compute resources. This is useful when databases have varying or unpredictable usage patterns because unused capacity from one database can potentially be used by another database in the pool. Elastic pools can improve resource efficiency compared with independently sizing every database. Administrators should analyze workload patterns and resource limits before deciding which databases should share a pool.<\/span><\/p>\n<h3><b>Question 390<\/b><\/h3>\n<p><b>Which Azure SQL feature can automatically recommend or apply certain performance improvements such as index changes?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Automatic tuning<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure DNS<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Private Link<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Resource locks<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Azure SQL automatic tuning can monitor database workload behavior and provide or apply supported tuning recommendations. Depending on configuration and workload, it can help with actions such as creating or dropping indexes and correcting certain plan regressions. Automatic tuning can reduce manual administration effort, but administrators should still review performance requirements and monitor changes. Automatic tuning is not a replacement for proper database design, indexing strategy, or performance analysis.<\/span><\/p>\n<h3><b>Question 391<\/b><\/h3>\n<p><b>Which Azure SQL feature stores historical query execution information that can be used to investigate performance regressions?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Query Store<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Firewall<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Key Vault<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Resource Group<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Query Store captures historical query information, including execution plans and runtime statistics, depending on configuration. This historical information helps administrators compare query behavior over time and identify performance regressions. It is particularly useful when a query becomes slower after a plan change. Administrators can use Query Store data together with execution plans and other monitoring tools to investigate performance problems rather than relying only on a single point-in-time observation.<\/span><\/p>\n<h3><b>Question 392<\/b><\/h3>\n<p><b>Which SQL Server feature captures detailed database and server events with configurable event sessions?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Extended Events<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dynamic Data Masking<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Row-Level Security<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Transparent Data Encryption<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Extended Events is a lightweight event-monitoring system used to capture detailed information about SQL Server and supported Azure SQL activities. Administrators can create sessions that capture specific events and actions, such as errors, long-running queries, deadlocks, or other diagnostic information. Because sessions can be configured to collect only relevant events, Extended Events can be more targeted than broad tracing approaches. It is commonly used for advanced troubleshooting and performance analysis.<\/span><\/p>\n<h3><b>Question 393<\/b><\/h3>\n<p><b>Which SQL Server feature is specifically useful for detecting and investigating deadlocks?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Extended Events<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">BACPAC<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Azure Cost Management<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data Masking<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Extended Events can capture deadlock information, including the relationships between transactions and resources involved in the deadlock. Administrators can analyze captured deadlock data to identify which sessions were blocking each other and determine the resources involved. This information can help developers and database administrators modify queries, indexes, transactions, or application behavior to reduce recurring deadlocks. Deadlock monitoring is an important part of maintaining reliable database workloads.<\/span><\/p>\n<h3><b>Question 394<\/b><\/h3>\n<p><b>Which SQL Server dynamic management view can show currently executing requests and their status?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">sys.dm_exec_requests<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">sys.tables<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">sys.columns<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">sys.database_principals<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">sys.dm_exec_requests<\/span><span style=\"font-weight: 400;\"> provides information about requests currently executing on SQL Server and supported SQL platforms. Administrators can use it to investigate running queries, wait information, blocking, CPU usage, and other request-related details. It is particularly useful during troubleshooting when a database appears slow or when a request is consuming significant resources. It can often be combined with other DMVs to obtain session, SQL text, and execution-plan information.<\/span><\/p>\n<h3><b>Question 395<\/b><\/h3>\n<p><b>Which DMV is commonly used to review current SQL Server sessions and their session IDs?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">sys.dm_exec_sessions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">sys.dm_db_index_physical_stats<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">sys.database_permissions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">sys.columns<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">sys.dm_exec_sessions<\/span><span style=\"font-weight: 400;\"> provides information about authenticated sessions connected to the SQL Server instance or supported platform. Administrators can use it to review session IDs, login information, connection status, and other session-level details. It is useful when investigating active connections, user activity, or relationships between sessions and currently executing requests. Combining <\/span><span style=\"font-weight: 400;\">sys.dm_exec_sessions<\/span><span style=\"font-weight: 400;\"> with <\/span><span style=\"font-weight: 400;\">sys.dm_exec_requests<\/span><span style=\"font-weight: 400;\"> can provide a more complete picture of current database activity.<\/span><\/p>\n<h3><b>Question 396<\/b><\/h3>\n<p><b>Which SQL Server feature can restrict database access so that users can see only rows permitted by a security predicate?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Row-Level Security<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Transparent Data Encryption<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data Compression<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Query Store<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Row-Level Security (RLS) allows administrators to control which rows a user can access based on a security predicate. This is useful when different users or groups should see different subsets of the same table. For example, users could be restricted to records belonging to their assigned department. RLS applies access rules at the row level and can help enforce data isolation without requiring separate tables or databases for each user group.<\/span><\/p>\n<h3><b>Question 397<\/b><\/h3>\n<p><b>Which Azure SQL security feature obscures sensitive column values in query results without changing the stored data?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dynamic Data Masking<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Transparent Data Encryption<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Always Encrypted<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Row-Level Security<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Dynamic Data Masking can obscure sensitive data in query results for users who do not have permission to view the unmasked values. The underlying data remains stored in its original form. It is useful for limiting exposure of sensitive information to certain users or applications. Dynamic Data Masking should not be treated as encryption because privileged users or properly authorized processes may still access the underlying data. It is primarily an access-control and data-exposure feature.<\/span><\/p>\n<h3><b>Question 398<\/b><\/h3>\n<p><b>Which Azure SQL security feature encrypts sensitive column data so that the database engine does not have access to the plaintext in supported configurations?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Always Encrypted<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dynamic Data Masking<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Row-Level Security<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Query Store<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Always Encrypted is designed to protect sensitive data by encrypting selected columns and keeping encryption keys outside the database engine. In supported configurations, the client application performs encryption and decryption operations. This helps protect sensitive information from database administrators or processes that should not see plaintext values. Always Encrypted requires appropriate client-driver and application support, and administrators should carefully evaluate query limitations and supported operations before using it.<\/span><\/p>\n<h3><b>Question 399<\/b><\/h3>\n<p><b>Which feature encrypts data at rest in an Azure SQL Database without requiring application changes to encrypt individual columns?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Transparent Data Encryption<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Row-Level Security<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Dynamic Data Masking<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Query Store<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Transparent Data Encryption (TDE) provides encryption at rest for supported Azure SQL databases and SQL Server databases. It encrypts database files and associated storage without requiring applications to modify queries or explicitly encrypt individual columns. TDE helps protect stored database files if the underlying storage is accessed without authorization. It is different from Always Encrypted, which provides column-level protection and keeps encryption keys outside the database engine.<\/span><\/p>\n<h3><b>Question 400<\/b><\/h3>\n<p><b>Which security principle recommends granting users and applications only the permissions they actually need?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Least privilege<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Maximum privilege<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Shared administration<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Open access<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The principle of least privilege means users, applications, and services should receive only the permissions necessary to perform their required tasks. This reduces the potential impact of compromised accounts, application vulnerabilities, or accidental changes. In Azure SQL and SQL Server, administrators can apply least privilege through database roles, schemas, object permissions, and carefully selected <\/span><span style=\"font-weight: 400;\">GRANT<\/span><span style=\"font-weight: 400;\"> statements. Regular permission reviews are important because unnecessary privileges can accumulate as applications and responsibilities change.<\/span><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>View Full\u00a0Microsoft DP-800 Exam Dumps\u00a0and Practice Test Dumps. &nbsp; Question 381 Which Microsoft service can help migrate SQL Server databases to Azure by providing migration assessment and guidance? Azure Database Migration Service Azure DNS Azure Key Vault Azure Advisor Correct Answer: 1 Explanation Azure Database Migration Service is designed to help migrate database workloads to [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11853"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=11853"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11853\/revisions"}],"predecessor-version":[{"id":11854,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/11853\/revisions\/11854"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=11853"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=11853"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=11853"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}