Configure Database Authentication and Authorization DP-300 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   You need to grant a user named 'app_user' the ability to execute a stored procedure named 'usp_GetOrders' in an Azure SQL Database. The user should not have any other permissions. Which T-SQL statement should you run?

   • AGRANT EXECUTE ON SCHEMA::dbo TO app_user;
   • BGRANT EXECUTE ON usp_GetOrders TO app_user;
   • CGRANT CONTROL ON usp_GetOrders TO app_user;
   • DGRANT SELECT ON usp_GetOrders TO app_user;
   Reveal Solution Discussion Select an answer first
2. 27expert · hard

   Your company uses Azure SQL Managed Instance and has both SQL authentication and Microsoft Entra ID authentication enabled. A user reports that they can connect using SQL authentication but not with their Entra ID account. The user is a member of the Entra ID group 'MI_Users', which has been created as a database user with db_datareader permissions. You verify that the Entra ID admin is set correctly. What is the most likely cause?

   • AThe Entra ID group 'MI_Users' is not enabled for security token claims, so the user's token does not include group membership.
   • BThe user's password is incorrect.
   • CThe user's Entra ID account is locked out.
   • DThe database user for the group does not have a corresponding server login.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   You administer a SQL Server on an Azure VM that is domain-joined to an on-premises Active Directory. The application team needs to connect using their existing Windows domain credentials. You want to grant the domain group 'CONTOSO\AppUsers' access to the 'Sales' database with only SELECT permissions. What should you do?

   • ACreate a Windows login for CONTOSO\AppUsers, then create a database user mapped to that login and grant SELECT on the Sales schema.
   • BCreate a database user for CONTOSO\AppUsers directly without a server login.
   • CCreate a SQL login for CONTOSO\AppUsers with a password and grant db_datareader in the Sales database.
   • DAdd CONTOSO\AppUsers to the sysadmin fixed server role.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which T-SQL statement grants the SELECT permission on a table to a database user?

   • AREVOKE SELECT ON dbo.Table1 FROM User1
   • BALTER USER User1 WITH DEFAULT_SCHEMA = dbo
   • CGRANT SELECT ON dbo.Table1 TO User1
   • DDENY SELECT ON dbo.Table1 TO User1
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A user reports that they cannot connect to an Azure SQL Database using their Microsoft Entra ID credentials, although they can connect using SQL authentication. The user is a member of the Entra ID group 'DBUsers', which has been created as a database user with db_datareader permissions. What is the most likely cause of the authentication failure?

   • AThe user's password has expired in Microsoft Entra ID.
   • BThe user is not assigned the 'User.Read' permission in Microsoft Entra ID.
   • CThe database user for the group does not have a corresponding server login.
   • DThe user's Entra ID token does not include the group membership claim because the group is not enabled for security tokens.
   Reveal Solution Discussion Select an answer first