You have a SQL pool in Azure Synapse that contains a table named dbo.Customers. The table contains a column name Email.
You need to prevent nonadministrative users from seeing the full email addresses in the Email column. The users must see values in a format of [email protected] instead.
What should you do?
To prevent nonadministrative users from seeing the full email addresses and ensure they see email addresses in a specific masked format, the appropriate action is to set an email mask on the Email column using Microsoft SQL Server Management Studio. This allows you to customize the masking behavior specifically for the Email column, ensuring that it meets the format requirements of displaying something like [email protected]. Neither setting a sensitivity classification nor simply masking the column through the Azure portal would meet the specific requirement of modifying the email format in this particular manner.
I think it's a terrible question, both A(using T-SQL) and B (via GUI) can do the job.
You can do it on Azure Portal if it is a SQL service, on Synapse dedicated SQL pool you can only do it on Synapse Studio. I think only A is 100% correct in either scenario.
Go with A, reason for not B, if email column is string type ,default masking will make it as xxxxxxxx, so here I go with email mask on email column. https://learn.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview?view=azuresql
but you don't have to opt for the default and the add masking rule step from the link shows the exact same format as in the task. Therefore I would go with B to avoid overthinking :D
The link provided in the solution is correctly pointing to the solution: Dynamic Data Masking, that is done from the Azure Portal, so the correct answer is B! :)
B says just mask and not email mask
There are lots of comments here saying that the question does not ask for the default masking format. I'd be interested in hearing from people who saw this question on the exam. Because the way I read this question - it IS asking for the default format. There's just a line break in the question. The text says "in a format of a <a href="/cdn-cgi/l/email-protection" class="__cf_email__" data-cfemail="db8383839b83838383f5b8b4b6">[email protected]</a>" it's just that someone with less command of English put a space between the "a" and the "XXX" so the space got turned into a line break. So I think that if the question is actually the default format, then "A".
A or B
agree with @auwia ,B
email masking option via ssms
Vote for B becouse of "You set up a dynamic data masking policy in the Azure portal by selecting the Dynamic Data Masking blade under Security in your SQL Database configuration pane." Source: https://learn.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview?view=azuresql#:~:text=You%20set%20up%20a%20dynamic%20data%20masking%20policy%20in%20the%20Azure%20portal%20by%20selecting%20the%20Dynamic%20Data%20Masking%20blade%20under%20Security%20in%20your%20SQL%20Database%20configuration%20pane.
Occams razor with this one
A is better than B
A is correct
Its A ! B can work but not by default. Cgatgpt : Based solely on the information provided in the prompt and considering that any unspecified option would use a default value, the appropriate response would be: A. From Microsoft SQL Server Management Studio, set an email mask on the Email column. This is because option A specifically mentions setting an email mask, which is the type of masking required by the scenario. The other options do not mention configuring a custom masking format for email addresses.
Both A & B are correct capable of achieving the same. But let's go for A.
default masking will make it as xxxxxxxx,
B correct
both A and B are correct
The answer should be B as it's not the default email mask format.