nerdexam
Microsoft

AZ-305 · Question #104

You plan to deploy an Azure SQL database that will store Personally Identifiable Information (Pll). You need to ensure that only privileged users can view the Pll. What should you include in the solut

The correct answer is C. dynamic data masking. Dynamic data masking limits sensitive data exposure by masking it to non-privileged users. Dynamic data masking helps prevent unauthorized access to sensitive data by enabling customers to designate how much of the sensitive data to reveal with minimal impact on the application l

Submitted by klara.se· Mar 6, 2026Implement security

Question

You plan to deploy an Azure SQL database that will store Personally Identifiable Information (Pll). You need to ensure that only privileged users can view the Pll. What should you include in the solution?

Options

  • ATransparent Data Encryption (TDE)
  • BData Discovery & Classification
  • Cdynamic data masking
  • Drole-based access control (RBAC)

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    81% (22)
  • D
    11% (3)

Explanation

Dynamic data masking limits sensitive data exposure by masking it to non-privileged users. Dynamic data masking helps prevent unauthorized access to sensitive data by enabling customers to designate how much of the sensitive data to reveal with minimal impact on the application layer. It's a policy-based security feature that hides the sensitive data in the result set of a query over designated database fields, while the data in the database is not changed. https://docs.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview

Topics

#dynamic data masking#PII protection#SQL Database security#data obfuscation

Community Discussion

No community discussion yet for this question.

Full AZ-305 Practice