DP-800: Developing AI-Enabled Database Solutions

By Microsoft · Question Mode

QuestionQ78

VerifiedSecure, optimize, and deploy database solutions

You have an Azure SQL database named sqldb-ai-prod that stores customer support tickets for a multitenant software as a service (SaaS) application. sqldb-ai-prod contains a table named Tickets. Tickets contains columns named TenantId, TicketId, CustomerEmail, CustomerPhone, and Notes.

You plan to strengthen data access because a new support team will use ad hoc reporting tools that connect directly to sqldb-ai-prod.

You need to configure security to meet these requirements:

  • Support agents must see only the rows of their own TenantId column.
  • Support agents must see only the domain name portion of the CustomerEmail column.

Each action may be used once, more than once, or not at all.

Drag & Drop
Support agents must see only the rows of their own TenantId:
Support agents must see only the domain name portion of CustomerEmail:
Explanation

Row-level security uses a filter predicate to restrict which rows are returned based on the querying user’s identity or session context, so it enforces tenant isolation. Dynamic data masking applies a masking rule to selected columns for nonprivileged users, including email-format masking. TDE and Always Encrypted are encryption-at-rest/data-protection mechanisms and do not provide row filtering or a masked query presentation.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!