nerdexam
Microsoft

70-450 · Question #52

You administer a SQL Server 2008 instance that will host a new database application. You plan to design the security requirements for the application. Each application user has a unique login to the…

The correct answer is C. Configure the new database to use the TRUSTWORTHY option, and then add each user. If this ever actually comes up, you may want to re-think your application design. Presumably, the application users are logging in to the app database. Since this database is trusted, and the users exist in MSDB, the users will be able to schedule jobs via the mechanism in the…

Design an optimized database solution

Question

You administer a SQL Server 2008 instance that will host a new database application. You plan to design the security requirements for the application. Each application user has a unique login to the SQL Server 2008 server. The application database contains stored procedures to execute stored procedures in the MSDB database. The stored procedures in the MSDB database schedule SQLAgent jobs. You need to ensure that the stored procedures in the MSDB database are executed by using the security context of the application user. What should you do?

Options

  • AAdd each user to the public role in the MSDB database.
  • BAdd each user to the db_dtsltduser database role in the MSDB database.
  • CConfigure the new database to use the TRUSTWORTHY option, and then add each user
  • DConfigure the MSDB database to use the TRUSTWORTHY option, and then add each user

How the community answered

(36 responses)
  • A
    8% (3)
  • B
    14% (5)
  • C
    75% (27)
  • D
    3% (1)

Explanation

If this ever actually comes up, you may want to re-think your application design. Presumably, the application users are logging in to the app database. Since this database is trusted, and the users exist in MSDB, the users will be able to schedule jobs via the mechanism in the question... which probably is not a good idea.

Topics

#TRUSTWORTHY#execution context#cross-database permissions#MSDB security

Community Discussion

No community discussion yet for this question.

Full 70-450 Practice