Designing an Azure Data Solution (legacy) — Question 39

You plan to create an Azure Synapse Analytics dedicated SQL pool.
You need to minimize the time it takes to identify queries that return confidential information as defined by the company's data privacy regulations and the users who executed the queries.
Which two components should you include in the solution? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Answer options

• A. dynamic data masking for columns that contain confidential information
• B. sensitivity-classification labels applied to columns that contain confidential information
• C. resource tags for databases that contain confidential information
• D. audit logs sent to a Log Analytics workspace

Correct answer: A, B

Explanation

Dynamic data masking helps to protect sensitive data by obfuscating it in real-time, making it easier to identify queries that may expose confidential information. Sensitivity-classification labels provide a way to categorize data according to its confidentiality level, which aids in compliance with data privacy regulations. Options C and D do not directly facilitate the identification of queries related to sensitive information as effectively as A and B.