Implement a secure environment →mediumMultiple ChoiceObjective-mapped

DP-300 Implement a secure environment Practice Question

Exhibit

Refer to the exhibit.

```json
{
  "properties": {
    "state": "Enabled",
    "auditActionsAndGroups": [
      "SUCCESSFUL_DATABASE_AUTHENTICATION_GROUP",
      "FAILED_DATABASE_AUTHENTICATION_GROUP"
    ],
    "storageAccountAccessKey": null,
    "storageEndpoint": null,
    "isAzureMonitorTargetEnabled": true
  }
}
```

Refer to the exhibit. You are reviewing the audit settings for an Azure SQL Database. What will this configuration do?

⚠ Common exam trap

Many exam-takers assume auditing requires a storage endpoint and thus choose Option A, overlooking that Log Analytics and Event Hubs are valid destinations that do not need a storage endpoint.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Audit logs are written to Azure Monitor (Log Analytics).

The exhibit shows that the audit destination is set to 'Log Analytics' (Azure Monitor), which means audit logs will be sent to a Log Analytics workspace. This configuration does not require a storage endpoint because Log Analytics is the designated target. Option B correctly identifies that audit logs are written to Azure Monitor (Log Analytics).

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Auditing is disabled because no storage endpoint is provided.
Why it's wrong here
Auditing can use Azure Monitor as destination.
✓
Audit logs are written to Azure Monitor (Log Analytics).
Why this is correct
isAzureMonitorTargetEnabled: true sends logs to Log Analytics.
✗
Only failed authentication attempts are audited.
Why it's wrong here
Both success and failure groups are included.
✗
Audit logs are written to an Azure Storage account.
Why it's wrong here
Storage endpoint is null; logs are sent to Azure Monitor.

Go deeper

DP-300 Implement a secure environment Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question