AZ-305 Question 22

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 4

  Today's exam question

• Chose A2

  The best choice here is A. Dynamic Data Masking. Here’s why: Dynamic Data Masking (DDM) Purpose: DDM helps protect sensitive data from unauthorized access by masking the data at the query result level. This means that non-privileged users will only see masked data (e.g., partially hidden) instead of the actual PII. Implementation: It dynamically hides the PII, which is ideal for ensuring that only authorized users can view the full, unmasked data. Why not the others? Role-Based Access Control (RBAC) RBAC controls who has access to the database but doesn’t directly mask or hide PII. Data Discovery & Classification This helps you identify and classify sensitive data, but it doesn't restrict access to PII. Transparent Data Encryption (TDE) TDE protects data at rest by encrypting the database files. It doesn’t prevent privileged users from viewing the data once they have access to the database.

• 3

  This question was in the exam, August 2024. I gave this same answer and scored 870