mediumMultiple SelectObjective-mapped
DP-203 Practice Question: Which TWO actions should you take when monitoring…
Which TWO actions should you take when monitoring Azure Data Lake Storage Gen2 to detect security threats?
⚠ Common exam trap
Watch out — candidates often confuse data protection features (like soft delete) or network controls (like firewalls) with active threat detection, overlooking that only dedicated security monitoring tools (Azure Security Center/Defender and Sentinel) can identify and alert on security threats in real time.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use Azure Security Center and Azure Defender for Storage.
Azure Security Center (now Microsoft Defender for Cloud) with Azure Defender for Storage provides built-in threat detection for Azure Data Lake Storage Gen2, including anomaly detection, malware scanning, and alerts for suspicious activities like unauthorized access or data exfiltration. This is a primary action for detecting security threats because it continuously monitors storage telemetry and applies machine learning to identify potential security incidents.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Use Azure Security Center and Azure Defender for Storage.
Why this is correct
Azure Defender provides threat detection and alerts for storage accounts.
- ✓
Enable diagnostic settings for the storage account and send logs to Azure Sentinel.
Why this is correct
Diagnostic logs capture operations and can be analyzed for security events.
- ✗
Enable soft delete for blobs to recover from accidental deletions.
Why it's wrong here
Soft delete is a recovery feature, not a threat detection mechanism.
- ✗
Configure firewall and virtual network service endpoints.
Why it's wrong here
Network restrictions reduce exposure but do not detect threats.
- ✗
Set up alerting on the 'Transactions' metric.
Why it's wrong here
Metrics alone do not detect security threats; they measure performance.
Go deeper
Related to this question
About these practice questions
This DP-203 question is part of Courseiva's 760-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-203 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-203 exam.