nerdexam
Microsoft

70-465 · Question #44

You need to recommend a solution for Application1 that meets the security requirements. What should you include in the recommendation?

The correct answer is D. Signed stored procedures. To meet security requirements for Application1, signed stored procedures allow users to execute procedures with elevated permissions without granting direct table access, enforcing least-privilege access control at the database level.

Submitted by manish99· Mar 5, 2026Design database security solutions

Question

You need to recommend a solution for Application1 that meets the security requirements. What should you include in the recommendation?

Options

  • AEncrypted columns
  • BCertificate Authentication
  • CSecure Socket Layer (SSL)
  • DSigned stored procedures

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    8% (2)
  • C
    13% (3)
  • D
    75% (18)

Why each option

To meet security requirements for Application1, signed stored procedures allow users to execute procedures with elevated permissions without granting direct table access, enforcing least-privilege access control at the database level.

AEncrypted columns

Encrypted columns protect data at rest from unauthorized viewing but do not control which users or applications can execute specific database operations or restrict direct table access.

BCertificate Authentication

Certificate Authentication is used to authenticate identities connecting to SQL Server but does not control the permission scope of operations performed once connected, which is the core security requirement here.

CSecure Socket Layer (SSL)

SSL/TLS secures data in transit between the client and the database server but does not address authorization or privilege escalation controls needed to restrict what operations Application1 can perform on the database.

DSigned stored proceduresCorrect

Signed stored procedures use code signing (via certificates or asymmetric keys) to grant the stored procedure elevated permissions independently of the caller's permissions. This allows Application1 to execute specific database operations through the procedure without requiring users to have direct object-level permissions, satisfying security requirements that restrict direct data access while still enabling necessary functionality.

Concept tested: SQL Server signed stored procedures for least-privilege access

Source: https://learn.microsoft.com/en-us/sql/relational-databases/security/authentication-access/signing-stored-procedures-with-a-certificate

Topics

#Stored procedure security#Code signing#Database permissions

Community Discussion

No community discussion yet for this question.

Full 70-465 Practice