DP-300 Implement a secure environment Practice Question
Which TWO are valid methods for auditing Azure SQL Database activity? (Choose two.)
⚠ Common exam trap
A common mix-up: candidates confuse Azure Monitor Metrics (numerical performance data) with Log Analytics (log/event data), or assume that on-premises file shares are supported because SQL Server on-premises supports file-based auditing, but Azure SQL Database is a PaaS service with restricted destination options.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure Storage account
Azure SQL Database auditing writes audit logs to a target destination, and both an Azure Storage account (option C) and a Log Analytics workspace (option D) are supported audit log destinations — the storage account stores audit records as blobs in a container, while the Log Analytics workspace ingests them for querying with KQL and integration with Azure Monitor. These are the two valid auditing targets offered when configuring auditing at the server or database level. Azure Event Grid (option A) is an event-routing service used for reacting to events, not a SQL Database audit log sink, and Azure Monitor Metrics (option B) holds numeric time-series metrics rather than detailed audit records. An on-premises file share (option E) is not a supported destination for Azure SQL Database auditing.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure Event Grid
Why it's wrong here
Event Grid routes reactive notifications about resource events; it does not capture database-level audit records of queries or logins. It is tempting because Event Grid genuinely drives automation and alerting on Azure resource changes, making it correct when the requirement is event-driven integration rather than activity auditing.
- ✗
Azure Monitor Metrics
Why it's wrong here
Azure Monitor Metrics records numeric platform telemetry such as CPU and DTU, not the T-SQL statements or login events that constitute an audit trail. It is tempting because metrics genuinely support performance diagnostics and alerting, which is the correct choice when the requirement is monitoring resource health rather than auditing activity.
- ✓
Azure Storage account
Why this is correct
Azure Storage account is valid because Azure SQL Database auditing writes audit logs to Azure Blob Storage in a storage account. This satisfies the stem's requirement for a supported audit target, distinct from Log Analytics or Event Hubs.
- ✓
Log Analytics workspace
Why this is correct
Log Analytics workspace is valid because Azure SQL Database auditing streams audit records to a Log Analytics workspace for querying via Kusto. This satisfies the stem's requirement for a supported audit destination, distinct from storage accounts or Event Hubs.
- ✗
On-premises file share
Why it's wrong here
Azure SQL Database has no on-premises file share to write audit logs to; auditing targets Azure storage, Log Analytics or Event Hubs. It is tempting because file-share log retention genuinely works for on-premises SQL Server instances, which is the right answer when auditing a self-hosted database rather than a PaaS service.
Go deeper
Related to this question
Learn chapter
Deploying and Configuring SQL Server on Azure Virtual Machines
Key term
Azure SQL Auditing
Azure SQL Auditing is a feature that tracks and records database events, such as data changes and logins, and writes them to an audit log for security monitoring and compliance.
Key term
Azure SQL Performance Tuning
Azure SQL Performance Tuning is the process of optimizing the speed and efficiency of queries and database operations in Microsoft Azure SQL Database or SQL Managed Instance to reduce latency and improve throughput.
About these practice questions
Courseiva writes every DP-300 question from scratch — 574 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-300 exam.