Question 568 of 919
DP-300 Implement a secure environment Practice Question
You are a database administrator for an e-commerce company that uses Azure SQL Database to store order data. The company is implementing a new policy that requires all database access to be audited, including both successful and failed attempts. Additionally, the audit logs must be retained for at least one year for compliance purposes. You need to configure auditing for the database. What should you do?
⚠ Common exam trap
A common mix-up: candidates confuse server-level auditing with database-level auditing or assume that Log Analytics or event hubs inherently support retention policies, but only storage accounts allow direct retention configuration within the audit settings.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable auditing on the database, set the audit log destination to a storage account, and configure retention to 365 days
Azure SQL Database auditing can be configured at the database level to send audit logs to a storage account, which allows you to set a retention policy of 365 days directly on the audit configuration. This meets the requirement to audit both successful and failed attempts and retain logs for at least one year for compliance.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use the 'Audit Logs' feature in the Azure portal to enable auditing and set retention to 365 days
Why it's wrong here
There is no separate 'Audit Logs' feature; you must configure auditing through the database's auditing blade.
- ✗
Enable auditing on the database and configure it to send logs to a Log Analytics workspace, then set the retention in Log Analytics to 365 days
Why it's wrong here
This option fails because while Log Analytics can store audit logs, the retention period for *audit logs specifically* is configured within the Azure SQL Database auditing settings, not solely within Log Analytics. It is tempting because Log Analytics is a common destination for various Azure diagnostic logs, and configuring retention there is standard practice for general log management.
- ✗
Enable auditing on the server and configure it to send logs to an event hub
Why it's wrong here
Server-level auditing is possible, but event hub does not provide built-in long-term retention; you would need additional services.
- ✓
Enable auditing on the database, set the audit log destination to a storage account, and configure retention to 365 days
Why this is correct
This captures all database events and retains logs for one year.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 24, 2026
This DP-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-300 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.