What is the primary goal of the principle of least privilege?

Grant permissions based on seniority

Grant permissions only to administrators

Grant all users the same level of access for simplicity

Grant users only the permissions necessary to perform their job functions

You need to grant a user named 'app_user' the ability to view data from a view named 'v_Orders' in an Azure SQL Database. The user should not have any other permissions. Which T-SQL statement should you run?

GRANT CONTROL ON v_Orders TO app_user;

GRANT SELECT ON SCHEMA::dbo TO app_user;

GRANT SELECT ON v_Orders TO app_user;

GRANT EXECUTE ON v_Orders TO app_user;

Which Microsoft Entra ID component must be configured in Azure SQL Database before you can create database users from Microsoft Entra identities?

Set the Microsoft Entra admin for the logical server

Enable Azure Active Directory-only authentication on the server

Assign the SQL Server Contributor role to the database user

Create a server-level firewall rule for the client IP

Microsoft Certified:Azure Database Administrator Associate

Domain 2Objective 1

Configure Database Authentication and Authorization DP-300 Practice Questions (Page 5)

Part of the Implement a secure environment domain, which accounts for 20–25% of the DP-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 3–5 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

8concepts

20–25%of the exam

Questions 21–25

21foundation · easy
Which type of security principal is scoped to a single database and is created from a login or an external identity?
Select an answer first
22foundation · easy
What is the primary goal of the principle of least privilege?
Select an answer first
23foundation · easy
Which permission should be granted to a user who only needs to read data from a specific table?
Select an answer first
24application · medium
You need to grant a user named 'app_user' the ability to view data from a view named 'v_Orders' in an Azure SQL Database. The user should not have any other permissions. Which T-SQL statement should you run?
Select an answer first
25foundation · easy
Which Microsoft Entra ID component must be configured in Azure SQL Database before you can create database users from Microsoft Entra identities?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DP-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “DP-300” is a trademark of its owner, used for identification only.

Configure Database Authentication and Authorization DP-300 Practice Questions (Page 5)

Questions 21–25

Which type of security principal is scoped to a single database and is created from a login or an external identity?

What is the primary goal of the principle of least privilege?

Which permission should be granted to a user who only needs to read data from a specific table?

You need to grant a user named 'app_user' the ability to view data from a view named 'v_Orders' in an Azure SQL Database. The user should not have any other permissions. Which T-SQL statement should you run?

Which Microsoft Entra ID component must be configured in Azure SQL Database before you can create database users from Microsoft Entra identities?

Keep studying — Implement a secure environment