Basic Concept: This question tests database auditing and query visibility. DP-300 expects you to distinguish between collecting audit events, retaining logs, and analyzing query behavior.
Why C is Correct: Snapshot is a security-related control, but its value depends on whether the requirement is identity, encryption, auditing, network isolation, or data exposure reduction. The scenario asks for: You have an Azure SQL database named DB1 that has strict auditing requirements. That makes Snapshot the option that satisfies the required Azure SQL layer and operational outcome.
Why A is Wrong: Read committed is a security-related control, but its value depends on whether the requirement is identity, encryption, auditing, network isolation, or data exposure reduction. It does not satisfy the required identity, encryption, firewall, auditing, or data-exposure boundary described in the scenario: You have an Azure SQL database named DB1 that has strict auditing requirements.
Why B is Wrong: Read uncommitted is a security-related control, but its value depends on whether the requirement is identity, encryption, auditing, network isolation, or data exposure reduction. It protects or manages a different security layer, so the required database access or protection behavior would still be incomplete.
Why D is Wrong: Repeatable read is a security-related control, but its value depends on whether the requirement is identity, encryption, auditing, network isolation, or data exposure reduction. It does not satisfy the required identity, encryption, firewall, auditing, or data-exposure boundary described in the scenario: You have an Azure SQL database named DB1 that has strict auditing requirements.