DP-201 Exam QuestionsBrowse all questions from this exam
Go to Exam

DP-201 Exam - Question 117

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure SQL database that has columns. The columns contain sensitive Personally Identifiable Information (PII) data.

You need to design a solution that tracks and stores all the queries executed against the PII data. You must be able to review the data in Azure Monitor, and the data must be available for at least 45 days.

Solution: You add classifications to the columns that contain sensitive data. You turn on Auditing and set the audit log destination to use Azure Log Analytics.

Does this meet the goal?

Show Answer
Correct Answer: B

The described solution does not meet the goal because simply adding classifications to columns and turning on Auditing with the audit log destination set to Azure Log Analytics is insufficient to ensure that the data is retained for at least 45 days. The default retention period for Log Analytics is 31 days, and while it is configurable up to 730 days, the question does not mention any step to change the retention settings from the default. Thus, additional configuration would be required to meet the 45-day retention requirement.

Discussion

15 comments
Sign in to comment
Ash666
Jul 23, 2020

The question asks what you’ve done has met the goal or not. So, B

mohowzeh
Jan 14, 2021

Agreed. It is possible to increase the retention period, but the question makes no mention of this step. Simply doing what the question says, will lead to log files being kept for 30 days. This does not satisfy the requirement.

memo43
May 24, 2021

the question dont need to mention to change/arrange retention period. All we know that it is possible to increase the period to 45. so the answer should be A

cadio30
May 27, 2021

it is a matter how the requirement was understood and I agree with answer B. Reference: https://docs.microsoft.com/en-us/azure/azure-monitor/logs/manage-cost-storage

bansal_vikrant
Apr 19, 2020

When we can change the default retention to 730 days, why is A wrong answer?

extraego
Aug 14, 2020

To set up 45 days, you have to change the default retention which is an additional step that is not stated. That's why the answer is B.

chirag1234
Apr 10, 2021

Answer should be yes, default Azure log analytics retention period is 90 day. https://docs.microsoft.com/en-us/azure/azure-monitor/logs/manage-cost-storage

Aditya167
Jan 3, 2021

log analytics default is 90 days so answer is A

201p
May 11, 2020

It's A, the reference for this question might be old

Lokesh08
May 23, 2020

The explanation says increasing to 730 days is only possible in the non-free tier, so I guess B is correct?

wyxh
Jun 5, 2020

The question does not specify the tier. It only ask to design a solution, so: it is possiible to have 45 days ? to me the answer is yes.

NeoUp
Nov 22, 2020

What's the point of switching to another type of storage just because you don't change the default setting that is changeable?

syu31svc
Dec 8, 2020

Log analytics is correct https://docs.microsoft.com/en-us/azure/azure-sql/database/auditing-overview: "Auditing for Azure SQL Database and Azure Synapse Analytics tracks database events and writes them to an audit log in your Azure storage account, Log Analytics workspace, or Event Hubs."

AngelRio
Jun 1, 2021

The answer is YES. Reference 1: Whizlabs course. Reference 2: https://docs.microsoft.com/en-us/azure/azure-sql/database/data-discovery-and-classification-overview?tabs=azure-t-sql

Anonymous
Jun 24, 2020

The answer should be A. https://docs.microsoft.com/en-us/azure/azure-monitor/platform/manage-cost-storage#change-the-data-retention-period. https://azure.microsoft.com/en-gb/pricing/details/monitor/

passnow
Jul 27, 2020

All similar pointer from previous indicate yes

als2kool
Sep 26, 2020

Previous Similar question to store to blob is yes. Log analytics is no and have to set retention.

brcdbrcd
Dec 5, 2020

You have multiple options for configuring where audit logs will be written. You can write logs to an Azure storage account, to a Log Analytics workspace for consumption by Azure Monitor logs (preview), or to event hub for consumption using event hub (preview). You can configure any combination of these options, and audit logs will be written to each. https://docs.microsoft.com/en-us/azure/azure-sql/database/auditing-overview should be Log analytics, for sure.

muni53
Sep 21, 2021

indeed default is 31 for standalone. so B