support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Microsoft
  4. DP-300

Free DP-300 Exam Braindumps
Administering Microsoft Azure SQL Solutions Questions 81–85 (page: 18)

Updated On: 10-Feb-2026
Page 18 of 85
PDF with 470 Questions
View Related Case Study

You need to recommend a solution to ensure that the customers can create the database objects. The solution must meet the business goals.

What should you include in the recommendation?

  1. For each customer, grant the customer ddl_admin to the existing schema.
  2. For each customer, create an additional schema and grant the customer ddl_admin to the new schema.
  3. For each customer, create an additional schema and grant the customer db_writer to the new schema.
  4. For each customer, grant the customer db_writer to the existing schema.

Answer(s): B

Explanation:

Scenario: Ensure that users of the PaaS solution can create their own database objects but be prevented from modifying any of the existing database objects supplied by Contoso.

Members of the db_ddladmin fixed database role can run any Data Definition Language (DDL) command in a database.
Incorrect:
Not D: db_writer does not have permissions to create database objects.


Reference:

https://docs.microsoft.com/en-us/sql/relational-databases/security/authentication-access/database-level-roles



View Related Case Study

You are evaluating the business goals.

Which feature should you use to provide customers with the required level of access based on their service agreement?

  1. dynamic data masking
  2. Conditional Access in Azure
  3. service principals
  4. row-level security (RLS)

Answer(s): D

Explanation:

Scenario: Provide the customers with different table and row access based on the customer's service agreement.
Row-level security (RLS) is a feature added as of SQL Server 2016. Instead of encrypting or decrypting a database's table data, it restricts and filters a table's row-level data in accordance with security policies defined by the user. This enables the database engine to limit the number of exposed data rows.


Reference:

https://docs.microsoft.com/en-us/sql/relational-databases/security/row-level-security?view=sql-server-ver15



You have a new Azure SQL database. The database contains a column that stores confidential information.

You need to track each time values from the column are returned in a query. The tracking information must be stored for 365 days from the date the query was executed.

Which three actions should you perform? Each correct answer presents part of the solution.

Note: Each correct selection is worth one point.

  1. Turn on auditing and write audit logs to an Azure Storage account.
  2. Add extended properties to the column.
  3. Turn on auditing and write audit logs to an Event Hub
  4. Apply sensitivity labels named Highly Confidential to the column.
  5. Turn on Azure Defender for SQL

Answer(s): A,C,D



You have an Azure virtual machine named VM1 on a virtual network named VNet1. Outbound traffic from VM1 to the internet is blocked.

You have an Azure SQL database named SqlDb1 on a logical server named SqlSrv1.

You need to implement connectivity between VM1 and SqlDb1 to meet the following requirements:

Ensure that all traffic to the public endpoint of SqlSrv1 is blocked.

Minimize the possibility of VM1 exfiltrating data stored in SqlDb1.

What should you create on VNet1?

  1. a VPN gateway
  2. a service endpoint
  3. a private link
  4. an ExpressRoute gateway

Answer(s): C

Explanation:

Azure Private Link enables you to access Azure PaaS Services (for example, Azure Storage and SQL Database) and Azure hosted customer-owned/partner services over a private endpoint in your virtual network.
Traffic between your virtual network and the service travels the Microsoft backbone network. Exposing your service to the public internet is no longer necessary.


Reference:

https://docs.microsoft.com/en-us/azure/private-link/private-link-overview



DRAG DROP (Drag and Drop is not supported)

You have a new Azure SQL database named DB1 on an Azure SQL server named AzSQL1.

The only user who was created is the server administrator.

You need to create a contained database user in DB1 who will use Microsoft Entra ID for authentication.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:






Step 1: Set the Microsoft Entra Admin for AzSQL1..

Step 2: Connect to DB1 by using the server administrator.
Sign into your managed instance with a Microsoft Entra login granted with the sysadmin role.

Step 3: Create a user by using the FROM EXTERNAL PROVIDER clause. FROM EXTERNAL PROVIDER is available for creating server-level Microsoft Entra logins in SQL Database managed instance. Microsoft Entra logins allow database-level Microsoft Entra principals to be mapped to server-level Microsoft Entra logins. To create a Microsoft Entra user from a Microsoft Entra login use the following syntax:

CREATE USER [AAD_principal] FROM LOGIN [Microsoft Entra login]


Reference:

https://docs.microsoft.com/en-us/sql/t-sql/statements/create-user-transact-sql



  PDF
Viewing page 18 of 85
Viewing questions 86 - 90 out of 470 questions


Post your Comments and Discuss Microsoft DP-300 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!