2Implement a Secure Environment

• 2.1Authentication and Access Control

  Understand Azure SQL authentication (Microsoft Entra authentication and SQL authentication) and in-database authorization (roles, least privilege). Securely control who can access what.

• 2.2Data Encryption and Auditing

  Understand Azure SQL encryption at rest (TDE), Always Encrypted for client-side column protection, dynamic data masking, auditing, and Microsoft Defender for SQL.