DP-300 Question #346: Real Exam Question with Answer & Explanation

Question

SIMULATION You need to add an Azure AD user named [email protected] to db1. User2- 12345678 must be able to read data from all the tables in db1 without being able to modify the data. To complete this task, sign in to the virtual machine. You may need to use SQL Server Management Studio and the Azure portal. Answer: Stage 1: Create the user Create a user with SSMS (SQL Server Management Studio) Step 1: In Object Explorer, expand the Databases folder. Step 2: Expand the database in which to create the new database user. [Here db1] Step 3: Right-click the Security folder, point to New, and select User.... Step 4: In the Database User - New dialog box, on the General page, select one of the following user types from the User type list: SQL user with login SQL user with password (when contained database is enabled) SQL user without login User mapped to a certificate User mapped to an asymmetric key *-> Windows user Step 4a: Select Windows User Step 5: When you select an option, the remaining options in the dialog may change. Some options only apply to specific types of database users. Some options can be left blank and will use a default value. User name Enter a name for the new user. If you have chosen Windows user from the User type list, you can also select the ellipsis (...) to open the Select User or Group dialog box. [Specify User2- 12345678] Step 6: Select OK. Stage 2: Assign permissions Additional Options The Database User - New dialog box also offers options on four other pages: Owned Schemas, Membership, Securables, and Extended Properties. Step 7: Select Securables The Securables page lists all possible securables and the permissions on those securables that can be granted to the login. Step 8: Select tables Step 9: Grant Read Permission Reference: https://learn.microsoft.com/en-us/sql/relational-databases/security/authentication-access/create- a-database-user