nerdexam
Microsoft

DP-300 · Question #50

Drag and Drop Question You have a new Azure SQL database named DB1 on an Azure SQL server named AzSQL1. The only user who was created is the server administrator. You need to create a contained…

The correct answer is Set the Active Directory Admin for AzSQL1.; Connect to DB1 by using the Active Directory admin account.; Create a user by using the FROM EXTERNAL PROVIDER clause. To create a contained database user authenticated via Azure AD, you must first configure an Azure AD admin for the SQL server (AzSQL1), because only an Azure AD admin can create Azure AD-based users. Then, you connect to DB1 using that Active Directory admin account (not the…

Submitted by salim_om· Mar 6, 2026Implement and manage data platform security - specifically configuring Azure AD authentication and creating contained database users in Azure SQL Database

Question

Drag and Drop Question You have a new Azure SQL database named DB1 on an Azure SQL server named AzSQL1. The only user who was created is the server administrator. You need to create a contained database user in DB1 who will use Azure Active Directory (Azure AD) for authentication. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Answer:

Exhibit

DP-300 question #50 exhibit

Answer Area

Drag items

Connect to DB1 by using the Active Directory admin account.Create a user by using the FROM EXTERNAL PROVIDER clause.Connect to DB1 by using the server administrator account.Set the Active Directory Admin for AzSQL1.From the Azure portal, assign the SQL DB Contributor role to the user.Create a login in the master database.

Correct arrangement

  • Set the Active Directory Admin for AzSQL1.
  • Connect to DB1 by using the Active Directory admin account.
  • Create a user by using the FROM EXTERNAL PROVIDER clause.

Explanation

To create a contained database user authenticated via Azure AD, you must first configure an Azure AD admin for the SQL server (AzSQL1), because only an Azure AD admin can create Azure AD-based users. Then, you connect to DB1 using that Active Directory admin account (not the server admin), and finally execute CREATE USER with the FROM EXTERNAL PROVIDER clause, which maps the Azure AD identity directly into the contained database without requiring a login in master.

Topics

#Azure SQL Database#Azure Active Directory Authentication#Contained Database Users#Database Security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full DP-300 Practice