Question 930 of 919
DP-300 Implement a secure environment Practice Question
Your organization uses Azure SQL Managed Instance and needs to implement a defense-in-depth strategy. Which THREE security controls should you implement? (Choose three.)
⚠ Common exam trap
Many exam-takers confuse performance tuning features (like columnstore indexes) or routine permission management (like application roles) with distinct security controls, failing to recognize that defense-in-depth requires separate, layered protections across network, monitoring, and auditing domains.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable advanced threat protection using Microsoft Defender for Cloud.
Enabling advanced threat protection via Microsoft Defender for Cloud provides continuous monitoring for suspicious activities, such as SQL injection or brute-force attacks, and generates security alerts that integrate with Azure Sentinel or SIEM solutions. This is a critical layer in a defense-in-depth strategy, as it detects and responds to threats at the database level.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enable advanced threat protection using Microsoft Defender for Cloud.
Why this is correct
Defender for Cloud provides threat detection and alerts for suspicious activities.
- ✓
Implement server-level auditing to capture database events.
Why this is correct
Auditing helps detect and investigate security incidents.
- ✗
Create columnstore indexes on large tables to improve query performance.
Why it's wrong here
Columnstore indexes improve performance, not security.
- ✓
Configure network security groups (NSGs) on the subnet to restrict inbound traffic to the managed instance.
Why this is correct
NSGs filter traffic at the subnet level, providing network security.
- ✗
Create application roles in each database to manage permissions.
Why it's wrong here
Application roles are an authorization mechanism, not a security control; they don't provide defense-in-depth.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 24, 2026
This DP-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-300 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.