Configure Database Authentication and Authorization DP-300 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A user can connect to Azure SQL Database using SSMS with Entra ID authentication, but when the same user runs a script using sqlcmd with an Entra ID access token, the connection fails with 'Login failed for user'. The user is a member of the Entra ID group 'DB_Admins', which is mapped to a database user with db_owner permissions. What is the most likely cause?

   • AThe user's password has expired and the token was cached.
   • BThe user's group membership is not included in the token because the group is not enabled for security tokens.
   • CThe database user for the group does not have a server login.
   • DThe access token was acquired for a different resource (e.g., https://management.azure.com instead of https://database.windows.net).
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which error indicates that a user does not have permission to perform an action on a database object?

   • AMsg 2812, Level 16, State 62 - Could not find stored procedure
   • BMsg 18456, Level 14, State 1 - Login failed
   • CMsg 229, Level 14, State 5 - The SELECT permission was denied
   • DMsg 4060, Level 16, State 1 - Cannot open database
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which authentication method is NOT supported for Azure SQL Managed Instance?

   • ASQL authentication
   • BService principal authentication
   • CMicrosoft Entra authentication
   • DWindows integrated authentication for on-premises users
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which T-SQL statement removes a previously granted permission without explicitly denying it?

   • ADROP
   • BDENY
   • CALTER
   • DREVOKE
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company uses Azure SQL Database and wants to replace SQL authentication with Microsoft Entra ID authentication. The security team requires that each database user be mapped to a specific Entra ID identity so that individual access can be audited and revoked independently. You need to create database users for the Entra ID group 'db_readers' and the user 'alice@contoso.com'. What should you do?

   • AAdd the Entra ID group and user to the db_datareader fixed database role using ALTER ROLE.
   • BRun CREATE USER [db_readers] FROM EXTERNAL PROVIDER and CREATE USER [alice@contoso.com] FROM EXTERNAL PROVIDER in the user database.
   • CRun CREATE LOGIN [db_readers] FROM EXTERNAL PROVIDER and CREATE LOGIN [alice@contoso.com] FROM EXTERNAL PROVIDER in the master database.
   • DCreate a contained database user with password for each identity and then grant SELECT permissions.
   Reveal Solution Discussion Select an answer first