DP-300 Implement a secure environment Practice Question
Your company uses Azure SQL Database and needs to comply with GDPR. You must implement data classification and protection. Which TWO actions should you take? (Choose two.)
⚠ Common exam trap
Many exam-takers confuse data classification (labeling and identifying sensitive data) with data encryption (Always Encrypted) or threat detection (Defender XDR), leading candidates to pick security features that do not fulfill the GDPR requirement for classification and labeling.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure sensitivity labels using Microsoft Purview Information Protection.
Microsoft Purview Information Protection provides sensitivity labels that can be applied to columns in Azure SQL Database to classify and protect personal data, meeting GDPR requirements. These labels enforce encryption, access restrictions, and visual markings, integrating with Azure SQL's data classification capabilities.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure sensitivity labels using Microsoft Purview Information Protection.
Why this is correct
Sensitivity labels can be applied to classified columns and are integrated with Microsoft Purview Information Protection.
- ✗
Implement Always Encrypted for all columns containing personal data.
Why it's wrong here
Always Encrypted encrypts data but does not classify it; classification is a separate step.
- ✗
Install the Azure Information Protection client on all client machines.
Why it's wrong here
Azure Information Protection client is not used for SQL Database classification; it is an on-premises tool.
- ✗
Enable Microsoft Defender XDR for the database server.
Why it's wrong here
Microsoft Defender XDR is for threat detection and response, not data classification.
- ✓
Use SQL Data Discovery & Classification in the Azure portal to classify columns containing personal data.
Why this is correct
This is the built-in classification tool in Azure SQL Database that helps identify and label sensitive data.
Go deeper
Related to this question
Learn chapter
Overview of Azure Data Platform Options
Key term
Azure SQL Performance Tuning
Azure SQL Performance Tuning is the process of optimizing the speed and efficiency of queries and database operations in Microsoft Azure SQL Database or SQL Managed Instance to reduce latency and improve throughput.
About these practice questions
One of 906 original DP-300 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-300 exam.