Exam DP-200 All Questions

View all questions & answers for the DP-200 exam

Exam DP-200 topic 3 question 4 discussion

Actual exam question from Microsoft's DP-200

Question #: 4
Topic #: 3

You have a SQL pool in Azure Synapse that contains a table named dbo.Customers. The table contains a column name Email.
You need to prevent nonadministrative users from seeing the full email addresses in the Email column. The users must see values in a format of [email protected] instead.
What should you do?

A. From Microsoft SQL Server Management Studio, set an email mask on the Email column.
B. From the Azure portal, set a mask on the Email column.
C. From Microsoft SQL Server Management studio, grant the SELECT permission to the users for all the columns in the dbo.Customers table except Email.
D. From the Azure portal, set a sensitivity classification of Confidential for the Email column.

Show Suggested Answer

Suggested Answer: B 🗳️
Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview

by cdanner at Nov. 5, 2020, 5:22 a.m.

Comments

Submit Cancel

datachamp

Highly Voted 4 years, 7 months ago

Correct Answer: A. From Microsoft SQL Server Management Studio, set an email mask on the Email column. This is because "This feature cannot be set using portal for Azure Synapse (use PowerShell or REST API) or SQL Managed Instance." So use Create table statement with Masking e.g. CREATE TABLE Membership (MemberID int IDENTITY PRIMARY KEY, FirstName varchar(100) MASKED WITH (FUNCTION = 'partial(1,"XXXXXXX",0)') NULL, . . https://docs.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview

upvoted 27 times

Mgb106

9 months, 3 weeks ago

Now the documentation only says "This feature can't be set using portal for SQL Managed Instance.". So maybe they added the option to do it in Azure Synapse, after this question was created.

upvoted 1 times

Mgb106

9 months, 3 weeks ago

But I think you can't do in from the portal, or at least you didn't use to be able to when this question was created.

upvoted 1 times

...

lingjun

4 years, 7 months ago

we can. I try it out from portal for Azure Synapse SQL pool

upvoted 7 times

dumpsm42

4 years, 6 months ago

https://docs.microsoft.com/pt-pt/azure/azure-sql/database/dynamic-data-masking-configure-portal see the initial note regards

upvoted 3 times

ramelas

3 years, 6 months ago

we are not using an MI

upvoted 2 times

...

4 years, 5 months ago

Should be A cause if masking was not specified the "@" will also be converted to X which is not what the question is asking https://docs.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview

upvoted 3 times

KRV

4 years, 5 months ago

Even though your choice is correct , its is bcos it applies to both Azure SQLDatabase and Azure Synapse Analytics

upvoted 1 times

...

Navii

4 years, 6 months ago

Option Marked is correct. Explanation: You set up a dynamic data masking policy in the Azure portal by selecting the Dynamic Data Masking blade under Security in your SQL Database configuration pane. This feature cannot be set using portal for SQL Managed Instance (use PowerShell or REST API).

upvoted 4 times

Ab5381

4 years, 5 months ago

I agree. I tried in my existing dedicated SQL Pools (formerly DWH) and I can do it from portal as mentioned in https://docs.microsoft.com/pt-pt/azure/azure-sql/database/dynamic-data-masking-configure-portal

upvoted 1 times

KRV

4 years, 5 months ago

Hi , The link that you pasted only applies to Azure SQL Database. Please check the link at the top it clearly says : APPLIES TO: Azure SQL Database However if you see the https://docs.microsoft.com/en-us/sql/relational-databases/security/dynamic-data-masking?view=sql-server-ver15 It applies to Applies to: yesSQL Server 2016 (13.x) and later YesAzure SQL Database YesAzure SQL Managed Instance yesAzure Synapse Analytics So since the question asks for Synapse Pool , I would go with the option A of expliciltiy specifying during create table as Email varchar(100) MASKED WITH (FUNCTION = 'email()') NULL

upvoted 2 times

...

syu31svc

4 years, 7 months ago

Answer can only be A

upvoted 1 times

...