70-465 · Question #98
You need to grant access to a OLTP database regardless of the user operating the application. Which strategy should you use? Select the BEST answer.
The correct answer is A. Application role. Application roles are the appropriate strategy for granting database access that is specific to an application rather than individual users, ensuring consistent permissions regardless of who is operating the application.
Question
Options
- AApplication role
- BDatabase user
- CServer login
- DServer role
How the community answered
(49 responses)- A73% (36)
- B4% (2)
- C10% (5)
- D12% (6)
Why each option
Application roles are the appropriate strategy for granting database access that is specific to an application rather than individual users, ensuring consistent permissions regardless of who is operating the application.
An application role in SQL Server allows an application to connect to a database with a specific set of permissions that are independent of the individual user operating the application. The application activates this role by providing a password, thereby shifting the security context to the role's defined permissions for the session.
A database user typically represents an individual or service account and their access is tied to their specific login credentials, not an application-wide, user-independent context.
A server login authenticates a principal at the SQL Server instance level but does not grant database-specific object access independent of the individual user operating an application.
A server role groups logins and grants server-level permissions, which is not suitable for managing application-specific, database-level access independent of the individual user.
Concept tested: SQL Server application roles for user-independent access
Source: https://learn.microsoft.com/en-us/sql/relational-databases/security/roles/application-roles?view=sql-server-ver16
Topics
Community Discussion
No community discussion yet for this question.