Implement a secure environment →hardMultiple ChoiceObjective-mapped

DP-300 Implement a secure environment Practice Question

Exhibit

Refer to the exhibit.
```json
{
  "type": "Microsoft.Sql/servers/databases/securityAlertPolicies",
  "apiVersion": "2022-05-01-preview",
  "properties": {
    "state": "Enabled",
    "emailAddresses": ["admin@contoso.com", "dba@contoso.com"],
    "emailAccountAdmins": true,
    "disabledAlerts": ["SqlInjection", "AccessAnomaly"],
    "retentionDays": 0
  }
}
```

Refer to the exhibit. You are configuring an Azure SQL Database security alert policy. What is the most significant misconfiguration?

⚠ Common exam trap

The trap here is that candidates focus on operational concerns like notification methods or alert enablement, but the exam tests knowledge of Azure's specific API validation rules, where an invalid parameter value (retentionDays=0) is a hard failure that blocks the entire configuration.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The retentionDays is set to 0, which is not supported

The most significant misconfiguration is setting `retentionDays` to 0 because Azure SQL Database security alert policies require a retention period between 1 and 365 days. A value of 0 is invalid and will cause the policy to fail validation or be rejected, meaning the alert policy cannot be created or updated. This directly prevents the security alerts from being configured at all, making it a critical blocking issue.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
The retentionDays is set to 0, which is not supported
Why this is correct
Retention days must be between 1 and 90.
✗
Some alerts are disabled, which could leave the database vulnerable
Why it's wrong here
Disabling alerts is a valid choice based on risk assessment.
✗
Emailing account admins may not be sufficient for notification
Why it's wrong here
It's a valid notification method.
✗
Multiple email addresses are specified, which may cause duplicate notifications
Why it's wrong here
Multiple addresses are allowed and useful.

Go deeper

DP-300 Implement a secure environment Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question