DP-203 Practice Question: Secure, monitor, and optimize data storage and data processing
You are a data engineer at a healthcare company. Your Azure Synapse Analytics workspace contains a dedicated SQL pool that holds patient records. A new compliance rule requires that all queries against the dedicated SQL pool be audited, and that any attempt to access data from an unauthorized IP address be logged. You need to configure auditing for the dedicated SQL pool. What should you do?
⚠ Common exam trap
The trap here is assuming that workspace-level auditing or Microsoft Defender for SQL automatically covers dedicated SQL pool auditing, when in fact dedicated SQL pool auditing is configured separately on the pool itself.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable auditing on the dedicated SQL pool and configure the audit log destination to Azure Storage, Log Analytics, or Event Hubs.
Auditing for an Azure Synapse Analytics dedicated SQL pool must be enabled directly on the pool, not at the workspace or Azure SQL Database level. The audit logs can be sent to Azure Storage, Log Analytics, or Event Hubs, providing a full record of queries and unauthorized access attempts. This configuration satisfies the compliance requirement to audit all queries and log unauthorized IP access attempts.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable auditing on the Azure Synapse Analytics workspace and set the audit log destination to a Log Analytics workspace.
Why it's wrong here
Auditing for a dedicated SQL pool is configured at the pool level, not at the workspace level. Workspace-level auditing applies to serverless SQL pools and Spark pools, but not to dedicated SQL pools. Using a Log Analytics workspace as the destination is possible for workspace-level auditing, but it does not satisfy the requirement for dedicated SQL pool auditing. This option misidentifies the scope of the setting.
- ✗
Enable Microsoft Defender for SQL on the dedicated SQL pool and set the audit log destination to Azure Storage.
Why it's wrong here
Microsoft Defender for SQL provides threat detection and vulnerability assessment, but it does not provide the detailed query auditing required by the compliance rule. Defender for SQL can alert on suspicious activities, but it does not log every query or unauthorized IP attempt. Auditing must be enabled separately, and Defender for SQL does not have an audit log destination setting. This option confuses threat detection with auditing.
- ✗
Configure Azure SQL Database auditing for the dedicated SQL pool by using the master database.
Why it's wrong here
Azure SQL Database auditing is a separate service and does not apply to Azure Synapse Analytics dedicated SQL pools. Although both use T-SQL, they are distinct platforms with different auditing mechanisms. Attempting to configure auditing through the master database of a dedicated SQL pool is not supported and will not produce the required audit logs. This option confuses Azure SQL Database with Synapse dedicated SQL pools.
- ✓
Enable auditing on the dedicated SQL pool and configure the audit log destination to Azure Storage, Log Analytics, or Event Hubs.
Why this is correct
Dedicated SQL pool auditing is configured directly on the pool and supports Azure Storage, Log Analytics, and Event Hubs as destinations. This captures all queries and unauthorized IP access attempts, meeting the compliance requirement. The setting is found in the Azure portal under the dedicated SQL pool's Security section, and it can also be set via PowerShell or Azure CLI.
Go deeper
Related to this question
About these practice questions
One of 509 original DP-203 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This DP-203 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-203 exam.