BenchMark Quizzes by MDFT Pro

Track Column Access and Store Audit Logs for 365 Days

You work for MDFT Pro, a well-known training agency that provides Microsoft certification courses to students worldwide. Mark, the Compliance Officer, manages a new Azure SQL database that stores student personal information including social security numbers, credit card details, and private contact information. Due to strict regulatory requirements for handling personal data, Mark needs to implement comprehensive auditing to track every instance when confidential student information is accessed.

You need to configure a solution that tracks each time values from the sensitive columns are returned in a query. The tracking information must be stored for 365 days from the date the query was executed to meet compliance retention requirements.

Which two actions should you perform?

Choose all correct answers from the options below.

Explanations for each answer:

Turn on auditing and write audit logs to an Azure Storage account is correct. Azure Storage accounts can retain audit logs for 365 days and provide cost-effective long-term storage for audit data.
Add extended properties to the column is incorrect. Extended properties are metadata tags but don't provide auditing or tracking of column access.
Turn on auditing and write audit logs to an Event Hub is incorrect. Event Hub is designed for real-time streaming and is not suitable for long-term audit log storage for 365 days.
Apply sensitivity labels named Highly Confidential to the column is correct. Sensitivity labels enable auditing of access to sensitive columns, allowing you to track when values are returned in queries.
Turn on Azure Defender for SQL is incorrect. While Azure Defender provides threat protection, it doesn't specifically track column-level access or provide the required audit logging.

Learn more about auditing for Azure SQL Database:

Azure SQL Database Auditing

Practice Exam

Track Column Access and Store Audit Logs for 365 Days

Discuss this question on social media: