70-465 · Question #44
You need to recommend a solution for Application1 that meets the security requirements. What should you include in the recommendation?
The correct answer is D. Signed stored procedures. To meet security requirements for Application1, signed stored procedures allow users to execute procedures with elevated permissions without granting direct table access, enforcing least-privilege access control at the database level.
Question
Options
- AEncrypted columns
- BCertificate Authentication
- CSecure Socket Layer (SSL)
- DSigned stored procedures
How the community answered
(24 responses)- A4% (1)
- B8% (2)
- C13% (3)
- D75% (18)
Why each option
To meet security requirements for Application1, signed stored procedures allow users to execute procedures with elevated permissions without granting direct table access, enforcing least-privilege access control at the database level.
Encrypted columns protect data at rest from unauthorized viewing but do not control which users or applications can execute specific database operations or restrict direct table access.
Certificate Authentication is used to authenticate identities connecting to SQL Server but does not control the permission scope of operations performed once connected, which is the core security requirement here.
SSL/TLS secures data in transit between the client and the database server but does not address authorization or privilege escalation controls needed to restrict what operations Application1 can perform on the database.
Signed stored procedures use code signing (via certificates or asymmetric keys) to grant the stored procedure elevated permissions independently of the caller's permissions. This allows Application1 to execute specific database operations through the procedure without requiring users to have direct object-level permissions, satisfying security requirements that restrict direct data access while still enabling necessary functionality.
Concept tested: SQL Server signed stored procedures for least-privilege access
Source: https://learn.microsoft.com/en-us/sql/relational-databases/security/authentication-access/signing-stored-procedures-with-a-certificate
Topics
Community Discussion
No community discussion yet for this question.