Exam DP-300 All Questions

View all questions & answers for the DP-300 exam

Exam DP-300 topic 2 question 14 discussion

Actual exam question from Microsoft's DP-300

Question #: 14
Topic #: 2

You are designing a security model for an Azure Synapse Analytics dedicated SQL pool that will support multiple companies.
You need to ensure that users from each company can view only the data of their respective company.
Which two objects should you include in the solution? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. a column encryption key
B. asymmetric keys
C. a function
D. a custom role-based access control (RBAC) role
E. a security policy

Show Suggested Answer

Suggested Answer: CE 🗳️

by ss1516 at Nov. 5, 2021, 9:38 a.m.

Comments

Submit Cancel

xegiwo9758

Highly Voted 1 year, 4 months ago

Selected Answer: CE

I will go with function and security policy

upvoted 10 times

...

ss1516

Highly Voted 1 year, 5 months ago

The question is about row-level security. Correct answer is a function + a security policy https://www.snp.com/blog/bring-your-data-securely-to-the-cloud-with-azure-synapse-analytics

upvoted 6 times

quermi

1 year, 5 months ago

I agree with you. The custom roles are for resources in Azure Portal, no for data inside database

upvoted 1 times

...

Icyb3r

Most Recent 8 months, 1 week ago

Selected Answer: CE

correct answer

upvoted 1 times

...

reachmymind

1 year, 1 month ago

C. a function E. a security policy Implement RLS by using the CREATE SECURITY POLICYTransact-SQL statement, and predicates created as inline table-valued functions. Applies to: yesSQL Server 2016 (13.x) and later, SQL Database (Get it), Azure Synapse Analytics. https://docs.microsoft.com/en-us/sql/relational-databases/security/row-level-security?view=sql-server-ver15

upvoted 3 times

...

AlCubeHead

1 year, 2 months ago

This is about row based security, so CE is the correct answer. You have to create a function to restrict the rows by user/group/role then create a SECURITY POLICY filter, e.g. CREATE FUNCTION Security.tvf_securitypredicate(@SalesRep AS nvarchar(50)) RETURNS TABLE WITH SCHEMABINDING AS RETURN SELECT 1 AS tvf_securitypredicate_result WHERE @SalesRep = USER_NAME() OR USER_NAME() = 'Manager'; GO CREATE SECURITY POLICY SalesFilter ADD FILTER PREDICATE Security.tvf_securitypredicate(SalesRep) ON Sales.Orders WITH (STATE = ON); GO

upvoted 4 times

...

U_C

1 year, 4 months ago

I think the answer is correct.

upvoted 2 times

...