Courseiva
Implement a secure environmenteasyMultiple ChoiceObjective-mapped

DP-300 Implement a secure environment Practice Question

You need to ensure that all users accessing Azure SQL Database from outside the corporate network are required to use multi-factor authentication (MFA). What should you configure?

⚠ Common exam trap

Candidates often confuse Azure Policy (which governs resource configuration compliance) with Conditional Access (which governs user authentication and access conditions), leading candidates to choose Azure Policy when only Conditional Access can enforce MFA at the sign-in level.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Configure a Conditional Access policy in Microsoft Entra ID.

Conditional Access policies in Microsoft Entra ID (formerly Azure AD) allow you to enforce MFA based on network location, device state, or risk level. By configuring a policy that targets the Azure SQL Database application and requires MFA for all access from outside the corporate network, you meet the requirement without altering the database or server configuration.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Enable Azure RBAC for the SQL server.

    Why it's wrong here

    Azure RBAC controls access to management operations, not authentication for database connections.

  • Configure a Conditional Access policy in Microsoft Entra ID.

    Why this is correct

    Conditional Access policies can require MFA based on conditions like network location.

  • Create an Azure Policy to require MFA.

    Why it's wrong here

    Azure Policy can enforce compliance rules but cannot enforce MFA for user authentication.

  • Turn on Transparent Data Encryption (TDE).

    Why it's wrong here

    TDE encrypts data at rest, not authentication enforcement.

About these practice questions

Courseiva writes every DP-300 question from scratch — 906 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This DP-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-300 exam.