You deploy an instance of SQL Server on Azure Virtual Machines named VM1. You need to create a SQL Server Agent job that will rebuild indexes of the databases hosted on VM1. The solution must use…

The correct answer is C. a system-assigned managed identity in Azure AD. With a system-assigned managed identity, Azure automatically creates an identity in Azure AD that is tied to the Azure VM instance. This allows you to grant the identity permissions to the specific resources that it requires, without having to manage credentials or rotate…

Submitted by parkjh· Mar 6, 2026Implement a secure environment

Question

You deploy an instance of SQL Server on Azure Virtual Machines named VM1. You need to create a SQL Server Agent job that will rebuild indexes of the databases hosted on VM1. The solution must use the principle of least privilege. What should you create first?

Exhibit

Options

Aa local Windows account
Ba user-assigned managed identity in Azure AD
Ca system-assigned managed identity in Azure AD
Dan Elastic Job agent

How the community answered

(16 responses)

A
6% (1)
B
13% (2)
C
75% (12)
D
6% (1)

Explanation

With a system-assigned managed identity, Azure automatically creates an identity in Azure AD that is tied to the Azure VM instance. This allows you to grant the identity permissions to the specific resources that it requires, without having to manage credentials or rotate passwords. Using a managed identity ensures that only the necessary permissions are granted to the job, which is in line with the principle of least privilege. The job can then use this managed identity to perform the required actions, such as rebuilding indexes.

Community Discussion

No community discussion yet for this question.

Full DP-300 Practice