Dynamic Data Masking for Azure SQL Database | AZ-204 Exam Solution | Microsoft

Implementing Dynamic Data Masking for Azure SQL Database - Solution | AZ-204 Exam

Question

Note: This question is part of a series of questions that present the same scenario.

Each question in the series contains a unique solution that might meet the stated goals.

Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it.

As a result, these questions will not appear in the review screen.

You are developing a mobile app that uses an Azure SQL Database named Weyland.

The database contains a table names Customers that has a field named email_address.

You want to implement dynamic data masking to hide the data in the email_address field.

Solution: You run the Set-AzSqlDatabaseDataMaskingPolicy -DatabaseName "Weyland" Powershell cmdlet Does the solution meet the goal?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B.

B.

The Set-AzSqlDatabaseDataMaskingPolicy cmdlet sets the masking policy for the database but does not set the masking rule.

Note: Masking is enabled by default.

https://docs.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview https://docs.microsoft.com/en-us/powershell/module/az.sql/set-azsqldatabasedatamaskingrule?view=azps-4.2.0

The solution provided does not meet the goal of implementing dynamic data masking to hide the data in the email_address field of the Customers table in the Weyland Azure SQL Database.

The Set-AzSqlDatabaseDataMaskingPolicy PowerShell cmdlet is used to configure a data masking policy for a database in Azure SQL. However, it does not define which columns or tables should be masked, and it does not specify the type of masking that should be applied.

To implement dynamic data masking on the email_address field of the Customers table in the Weyland Azure SQL Database, you need to define a data masking policy that specifies the masking rules for that field. This can be done using SQL commands or the Azure portal.

The policy should specify that the email_address field should be masked, and it should define the masking function to be used. For example, you could use the Email masking function, which replaces characters in the email address with asterisks to hide the actual email address while still displaying a visually similar one.

Therefore, the correct answer is B, No.