nerdexam
Microsoft

70-465 · Question #98

You need to grant access to a OLTP database regardless of the user operating the application. Which strategy should you use? Select the BEST answer.

The correct answer is A. Application role. Application roles are the appropriate strategy for granting database access that is specific to an application rather than individual users, ensuring consistent permissions regardless of who is operating the application.

Submitted by stefanr· Mar 5, 2026Design database security solutions

Question

You need to grant access to a OLTP database regardless of the user operating the application. Which strategy should you use? Select the BEST answer.

Options

  • AApplication role
  • BDatabase user
  • CServer login
  • DServer role

How the community answered

(49 responses)
  • A
    73% (36)
  • B
    4% (2)
  • C
    10% (5)
  • D
    12% (6)

Why each option

Application roles are the appropriate strategy for granting database access that is specific to an application rather than individual users, ensuring consistent permissions regardless of who is operating the application.

AApplication roleCorrect

An application role in SQL Server allows an application to connect to a database with a specific set of permissions that are independent of the individual user operating the application. The application activates this role by providing a password, thereby shifting the security context to the role's defined permissions for the session.

BDatabase user

A database user typically represents an individual or service account and their access is tied to their specific login credentials, not an application-wide, user-independent context.

CServer login

A server login authenticates a principal at the SQL Server instance level but does not grant database-specific object access independent of the individual user operating an application.

DServer role

A server role groups logins and grants server-level permissions, which is not suitable for managing application-specific, database-level access independent of the individual user.

Concept tested: SQL Server application roles for user-independent access

Source: https://learn.microsoft.com/en-us/sql/relational-databases/security/roles/application-roles?view=sql-server-ver16

Topics

#Application roles#Database access control#SQL Server security

Community Discussion

No community discussion yet for this question.

Full 70-465 Practice