Courseiva
Implement a secure environmenteasyMultiple ChoiceObjective-mapped

DP-300 Implement a secure environment Practice Question

You need to audit all failed login attempts to an Azure SQL Database. Which feature should you enable?

⚠ Common exam trap

It's easy for candidates to confuse Azure SQL Auditing with Advanced Threat Protection, assuming that threat detection automatically logs all failed logins, but in reality, ATP only alerts on suspicious patterns and does not provide a comprehensive audit trail of every failed login attempt.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Azure SQL Auditing

Azure SQL Auditing is the correct feature because it tracks database events, including failed login attempts, and writes them to an audit log in an Azure Storage account, Log Analytics workspace, or Event Hubs. This allows you to review and analyze authentication failures for security and compliance purposes. The audit logs capture the exact timestamp, source IP address, and the specific error message for each failed login, such as 'Login failed for user'.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Azure SQL Advanced Threat Protection

    Why it's wrong here

    ATP detects anomalous activities but does not provide detailed audit logs.

  • Azure SQL Database Vulnerability Assessment

    Why it's wrong here

    Vulnerability Assessment identifies security vulnerabilities, not audit logs.

  • Azure SQL Auditing

    Why this is correct

    Auditing can log failed login attempts to a storage account, Log Analytics, or Event Hubs.

  • Dynamic Data Masking

    Why it's wrong here

    Data masking obfuscates sensitive data, not audit.

Go deeper

Related to this question

About these practice questions

One of 906 original DP-300 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This DP-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-300 exam.