Hotspot Question You have an Azure subscription that is linked to a hybrid Azure Active Directory (Azure AD) tenant. The subscription contains an Azure Synapse Analytics SQL pool named Pool1. You…

Question

Exhibit

Answer Area

• MFA:Azure AD authentication
  Azure AD authenticationMicrosoft SQL Server authenticationPasswordless authenticationWindows authentication
• Database-level authentication:Contained database users
  Application rolesContained database usersDatabase rolesMicrosoft SQL Server logins

Explanation

This question tests knowledge of authentication methods available for Azure Synapse Analytics SQL pools, specifically which methods support Multi-Factor Authentication (MFA) and which support database-level authentication.

Approach. For MFA support, 'Azure Active Directory - Universal with MFA' is the correct choice, as it is the only Azure AD authentication method that enforces MFA through Azure AD Conditional Access and supports both cloud and hybrid (synced) identities. For database-level authentication, 'SQL authentication' (contained database users) is the correct choice, as it allows user accounts to be created directly within the database without needing a server-level login, providing true database-level scoping. Azure AD authentication methods (Password, Integrated, Universal with MFA) operate at the server/tenant level, while SQL contained database users operate at the database level.

Concept tested. Azure Synapse Analytics authentication methods - specifically distinguishing between Azure AD Universal with MFA (for MFA support), Azure AD Password/Integrated (no MFA), and SQL authentication vs. contained database users (for database-level authentication). Understanding that 'Azure AD - Universal with MFA' is the only AD method supporting MFA, and that SQL contained database users (not server logins) enable database-level authentication.

Reference. https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-mfa-ssms-overview and https://learn.microsoft.com/en-us/azure/synapse-analytics/sql/active-directory-authentication

No community discussion yet for this question.