DP-300 Implement a secure environment Practice Question
You administer an Azure SQL Database named FinanceDB. Auditors require that all SELECT statements against a table named Ledger be recorded with the identity of the caller, and that the audit records be retained for seven years in immutable storage. You need to configure auditing to meet these requirements. What should you do?
⚠ Common exam trap
The trap here is treating a long retention period as equivalent to immutable retention.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable auditing with the target set to a storage account configured with an immutability policy and a retention period of seven years.
Auditing to a storage account with a time-based immutability policy both records caller identity for the monitored statements and enforces immutable retention for the required period. Retention of 0 is not immutable, Log Analytics retention is mutable, and Event Hubs is a transient streaming target. Only the immutability policy on the storage account meets the auditors' requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable auditing with the target set to Log Analytics and set the workspace retention to seven years.
Why it's wrong here
Log Analytics supports longer retention but the workspace retention setting does not make records immutable; administrators with sufficient permissions can still purge or modify data. The requirement for immutable storage is not met by workspace retention alone.
- ✓
Enable auditing with the target set to a storage account configured with an immutability policy and a retention period of seven years.
Why this is correct
Writing audit logs to a storage account that has a time-based immutability policy enforces write-once, read-many retention for the specified period, satisfying the seven-year requirement. Auditing captures the caller identity for SELECT statements against Ledger, and the immutability policy prevents deletion or alteration during the retention window.
- ✗
Enable auditing with the target set to Event Hubs and forward events to a consumer application.
Why it's wrong here
Event Hubs is a streaming ingestion service and does not provide durable, immutable long-term storage by itself. Any retention depends on the downstream consumer, and the pipeline introduces a component that could alter records, so it cannot guarantee immutable seven-year retention.
- ✗
Enable server auditing with the target set to a storage account and set retention to 0.
Why it's wrong here
Retention of 0 means audit records are kept indefinitely but they are not immutable; a privileged user could delete or modify them. The auditors specifically require immutable retention for seven years, which indefinite retention in a mutable storage account does not satisfy.
Go deeper
Related to this question
Learn chapter
Managing Identity and Access for Azure SQL
Key term
Azure SQL Performance Tuning
Azure SQL Performance Tuning is the process of optimizing the speed and efficiency of queries and database operations in Microsoft Azure SQL Database or SQL Managed Instance to reduce latency and improve throughput.
About these practice questions
This DP-300 question is part of Courseiva's 574-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This DP-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-300 exam.