nerdexam
Microsoft

70-465 · Question #77

You need to provide a group of users from the IT and Manufacturing departments the minimum administrative rights to view database information and server state for the Manufacturing database on…

The correct answer is B. You should configure a Server Role. To provide a group of users with minimum administrative rights to view server state and database information for the Manufacturing database on MainDB1, you should configure a Server Role.

Submitted by krish.m· Mar 5, 2026Design database security solutions

Question

You need to provide a group of users from the IT and Manufacturing departments the minimum administrative rights to view database information and server state for the Manufacturing database on MainDB1. What should you do?

Options

  • AYou should configure a Database Role.
  • BYou should configure a Server Role.
  • CYou should configure a Shared SQL Server Login.
  • DYou should configure a Local Security Group.

How the community answered

(29 responses)
  • A
    14% (4)
  • B
    76% (22)
  • C
    7% (2)
  • D
    3% (1)

Why each option

To provide a group of users with minimum administrative rights to view server state and database information for the Manufacturing database on MainDB1, you should configure a Server Role.

AYou should configure a Database Role.

Database roles grant permissions only within a specific database and cannot be used to view server-level information like 'server state'.

BYou should configure a Server Role.Correct

Server roles in SQL Server grant permissions at the server level, which is necessary to view server state and information about all databases on the instance. Permissions such as `VIEW SERVER STATE` and `VIEW ANY DATABASE` are server-scoped and are appropriately managed by assigning users or groups to server roles, providing the required access across the server instance.

CYou should configure a Shared SQL Server Login.

A Shared SQL Server Login is an authentication principal, an identity for connecting to SQL Server, not a mechanism for assigning permissions or administrative rights.

DYou should configure a Local Security Group.

A Local Security Group is an operating system construct and does not directly grant permissions within SQL Server; while Windows groups can be mapped to SQL Server logins, configuring the group itself doesn't assign SQL Server permissions.

Concept tested: SQL Server server-level permissions and roles

Source: https://learn.microsoft.com/en-us/sql/relational-databases/security/authentication-access/server-level-roles

Topics

#SQL Server security#Server roles#Least privilege

Community Discussion

No community discussion yet for this question.

Full 70-465 Practice