An application uses a service account to connect to Azure SQL Database. The security policy requires that the service account has the minimum permissions necessary to perform its function: it must be able to insert and update rows in the 'Orders' table, but not delete rows or read other tables. What should you do?

Grant the service account SELECT, INSERT, UPDATE, and DELETE on the Orders table.

Add the service account to the db_owner fixed database role.

Add the service account to the db_datawriter fixed database role.

Create a database user for the service account and grant INSERT and UPDATE on the Orders table only.

You need to revoke a user's ability to delete rows from the 'Orders' table, but the user currently has DELETE permission through a database role. You want to deny the DELETE permission specifically for this user without affecting other members of the role. What should you do?

ALTER ROLE db_denydatawriter ADD MEMBER user;

REVOKE DELETE ON OBJECT::dbo.Orders FROM user;

Remove the user from the database role.

DENY DELETE ON OBJECT::dbo.Orders TO user;

You need to delegate permission management for a specific database to a user named 'perm_admin'. The user should be able to grant and revoke permissions on objects within the 'Sales' database but should not be able to create or drop database users. What should you do?

Grant perm_admin the CONTROL permission on the Sales database.

Add perm_admin to the db_securityadmin fixed database role.

Create a database user for perm_admin and grant the GRANT permission with the WITH GRANT OPTION on the Sales schema.

Add perm_admin to the db_owner fixed database role.

Which graphical tool in Azure SQL Database allows you to manage database-level permissions without writing T-SQL?

SQL Server Management Studio (SSMS)

Microsoft Certified:Azure Database Administrator Associate

Domain 2Objective 1

Configure Database Authentication and Authorization DP-300 Practice Questions (Page 4)

Part of the Implement a secure environment domain, which accounts for 20–25% of the DP-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 3–5 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

8concepts

20–25%of the exam

Questions 16–20

16application · medium
An application uses a service account to connect to Azure SQL Database. The security policy requires that the service account has the minimum permissions necessary to perform its function: it must be able to insert and update rows in the 'Orders' table, but not delete rows or read other tables. What should you do?
Select an answer first
17expert · hard
You need to revoke a user's ability to delete rows from the 'Orders' table, but the user currently has DELETE permission through a database role. You want to deny the DELETE permission specifically for this user without affecting other members of the role. What should you do?
Select an answer first
18application · medium
You need to delegate permission management for a specific database to a user named 'perm_admin'. The user should be able to grant and revoke permissions on objects within the 'Sales' database but should not be able to create or drop database users. What should you do?
Select an answer first
19foundation · easy
Which graphical tool in Azure SQL Database allows you to manage database-level permissions without writing T-SQL?
Select an answer first
20foundation · easy
In SQL Server Management Studio (SSMS), which page in the database properties allows you to add a database user and assign roles?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DP-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “DP-300” is a trademark of its owner, used for identification only.

Configure Database Authentication and Authorization DP-300 Practice Questions (Page 4)

Questions 16–20

You need to revoke a user's ability to delete rows from the 'Orders' table, but the user currently has DELETE permission through a database role. You want to deny the DELETE permission specifically for this user without affecting other members of the role. What should you do?

You need to delegate permission management for a specific database to a user named 'perm_admin'. The user should be able to grant and revoke permissions on objects within the 'Sales' database but should not be able to create or drop database users. What should you do?

Which graphical tool in Azure SQL Database allows you to manage database-level permissions without writing T-SQL?

In SQL Server Management Studio (SSMS), which page in the database properties allows you to add a database user and assign roles?

Keep studying — Implement a secure environment