Exam DP-203 topic 1 question 14 discussion

user 1 is admin, so he will see the value stored in dbms. 1. 0 2. Value in database

• Use a zero value for numeric data types (bigint, bit, decimal, int, money, numeric, smallint, smallmoney, tinyint, float, real). • Use 01-01-1900 for date/time data types (date, datetime2, datetime, datetimeoffset, smalldatetime, time).

I think the answer is correct as admins dont necessarily have access to ddmed data. 0 / values in db

* Use a zero value for numeric data types (bigint, bit, decimal, int, money, numeric, smallint, smallmoney, tinyint, float, real).

User 1 --> Data stored in the database because this user is server_admin and can access to unmasked data User 2 --> 0 because this user is db_reader and can't access to unmasked data and masked_function is set in default() You have to pay attention to masked_function when a user can't access to unmasked data to know what the user will get in the queries

1. 0 2. Value stored in database

Based on the information provided in the scenario: When User2 queries the YearlyIncome column, the values returned will be [XXXX]. This is because User2 has the role of db datareader, which means that they do not have access to the unmasked data, and the data will be masked (replaced with 'XXXX') when they query it. When User1 queries the BirthDate column, the values returned will be [the values stored in the database]. This is because User1 has the role of Server admin, which means that they have access to the unmasked data, and the data will be shown as it is stored in the database when they query it.

First case: output will be 0 User2 queries YearlyIncome column which (is_masked = 1) i.e. its confidential thus has very limited access. Since user2 is a simple db reader, the value wouldn't be viewed by the user. Second case: value stored in the database User1 is the admin or superuser with full access to the entire data within the database sys. So he will be able to view the brithdate column (is_masked=1) in the database 'sys'.

User2 is a reader so he will see 0 querying YearlyIncome with default() mask; User1 is admin and only he will see all stored values

correct

User 1: The value User 2: XXXX see https://docs.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview?view=azuresql AND https://www.sqlshack.com/dynamic-data-masking-in-sql-server

According to https://docs.microsoft.com/en-us/sql/relational-databases/security/dynamic-data-masking?view=sql-server-ver16 "For date and time data types use 01.01.1900 00:00:00.0000000 (date, datetime2, datetime, datetimeoffset, smalldatetime, time)." Data masking as defalut to a date dateime smalldate should be 1900-01-01. Strangely there is no such option. Any ideas anyone?

1. 0 2. Value in database

How user2 can access data as it is masked?

Can Someone explain first option as in doc it says 0

1. 0 (Default values for money data type for masked function will written when queried by user2) 2. Value in database ( As it is queried by user1 who is admin )

CORRECT