DP-300 Question #140: Real Exam Question with Answer & Explanation

Question

Hotspot Question You have an Azure subscription that is linked to a hybrid Azure Active Directory (Azure AD) tenant. The subscription contains an Azure Synapse Analytics SQL pool named Pool1. You need to recommend an authentication solution for Pool1. The solution must support multi- factor authentication (MFA) and database-level authentication. Which authentication solution or solutions should you include in the recommendation? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:

Options

• __typehotspot
• variantdropdown

Explanation

This question tests knowledge of authentication methods available for Azure Synapse Analytics SQL pools, specifically which methods support Multi-Factor Authentication (MFA) and which support database-level authentication.

Approach. For MFA support, 'Azure Active Directory - Universal with MFA' is the correct choice, as it is the only Azure AD authentication method that enforces MFA through Azure AD Conditional Access and supports both cloud and hybrid (synced) identities. For database-level authentication, 'SQL authentication' (contained database users) is the correct choice, as it allows user accounts to be created directly within the database without needing a server-level login, providing true database-level scoping. Azure AD authentication methods (Password, Integrated, Universal with MFA) operate at the server/tenant level, while SQL contained database users operate at the database level.

Concept tested. Azure Synapse Analytics authentication methods - specifically distinguishing between Azure AD Universal with MFA (for MFA support), Azure AD Password/Integrated (no MFA), and SQL authentication vs. contained database users (for database-level authentication). Understanding that 'Azure AD - Universal with MFA' is the only AD method supporting MFA, and that SQL contained database users (not server logins) enable database-level authentication.

Reference. https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-mfa-ssms-overview and https://learn.microsoft.com/en-us/azure/synapse-analytics/sql/active-directory-authentication

No community discussion yet for this question.