DP-300 Question #250: Real Exam Question with Answer & Explanation

Question

You have an Azure SQL database named DB1. A user named User1 has an Azure Active Directory (Azure AD) account. You need to provide User1 with the ability to add and remove columns from the tables in DB1. The solution must use the principle of least privilege. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options

• AAssign the database user the db_owner role.
• BCreate a contained database user.
• CCreate a login and an associated database user.
• DAssign the database user the db_ddladmin role.

Explanation

C: Logins and users: A user account in a database can be associated with a login that is stored in the master database or can be a user name that is stored in an individual database. A login is an individual account in the master database, to which a user account in one or more databases can be linked. With a login, the credential information for the user account is stored A user account is an individual account in any database that may be, but does not have to be, linked to a login. With a user account that is not linked to a login, the credential information is stored with the user account. D: db_ddladmin: Members of the db_ddladmin fixed database role can run any Data Definition Language (DDL) command (such as adding and removing columns) in a database. https://docs.microsoft.com/en-us/azure/azure-sql/database/logins-create-manage https://docs.microsoft.com/en-us/sql/relational-databases/security/authentication- access/database-level-roles?view=sql-server-ver15

No community discussion yet for this question.