HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains a group named Group1 and an Azure SQL managed instance that hosts a database named DB1.You need to ensure that Group1 has read access to new tables created in DB1. The solution must use the principle of least privilege.How should you complete the Transact-SQL statement? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: SELECTSELECT permission means READ permissions.Note: GRANT Object Permissions (Transact-SQL) grants permissions on a table, view, table-valued function, stored procedure, extended stored procedure, scalar function, aggregate function, service queue, or synonym.Syntax: GRANT <permission> [ ,...n ] ON[ OBJECT :: ][ schema_name ]. object_name [ ( column [ ,...n ] ) ] TO <database_principal> [ ,...n ][ WITH GRANT OPTION ][ AS <database_principal> ]ON [ OBJECT :: ] [ schema_name ] . object_nameSpecifies the object on which the permission is being granted. The OBJECT phrase is optional if schema_name is specified. If the OBJECT phrase is used, the scope qualifier (::) is required. If schema_name is not specified, the default schema is used. If schema_name is specified, the schema scope qualifier (.) is required.Box 2: Schema
https://learn.microsoft.com/en-us/sql/t-sql/statements/grant-object-permissions-transact-sql
You have an instance of SQL Server on Azure Virtual Machines named VM1.You plan to schedule a SQL Server Agent job that will rebuild indexes of the databases hosted on VM1.You need to configure the account that will be used by the agent. The solution must use the principle of least privilege.Which operating system user right should you assign to the account?
Answer(s): B
Select an account for the SQL Server Agent service.Windows domain account permissionsFor improved security, select This account, which specifies a Windows domain account. The Windows domain account that you specify must have the following permissions:In all Windows versions, permission to log on as a service (SeServiceLogonRight).
https://learn.microsoft.com/en-us/sql/ssms/agent/select-an-account-for-the-sql-server-agent-service
You have an Azure subscription that contains an instance of SQL Server on an Azure virtual machine named SQLVM1 and a user named User1. SQLVM1 hosts a database named DB1. User1 has the db_backup operator role.You need to ensure that User1 can create a scheduled task to perform a full backup of DB1. The solution must use the principle of least privilege.Which built-in database role should you assign to User1?
Answer(s): C
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains a logical SQL server. The server hosts two databases named db1 and db2 and a Microsoft Entra service principal named app1.You need to ensure that app1 can access db1. The solution must use the principle of least privilege.How should you complete the Transact-SQL statement? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Box 1: USERMicrosoft Entra service principal with Azure SQLWhen a Microsoft Entra application is registered using the Azure portal or a PowerShell command, two objects are created in the Microsoft Entra tenant:An application objectA service principal objectSQL Database and SQL Managed Instance support the following Microsoft Entra objects:Microsoft Entra users (managed, federated, and guest)Microsoft Entra groups (managed and federated)Microsoft Entra applicationsThe T-SQL command CREATE USER [Microsoft_Entra_Object] FROM EXTERNAL PROVIDER on behalf of a Microsoft Entra application is now supported for SQL Database.Box 2: FROM EXTERNAL PROVIDER
https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-service-principal
Your on-premises network contains a server that hosts a 60-TB database named DB1. The network has a 10- Mbps internet connection.You need to migrate DB1 to Azure. The solution must minimize how long it takes to migrate the database.What should you use?
Microsoft Azure Data Box is a hardware appliance designed to allow customers to import or export large amounts of data -- more than 40TB -- into and out of Azure offline. It is especially helpful when there is zero or limited network connectivity. Microsoft ships customers a proprietary Data Box storage device with a rugged casing to protect and secure data during the transit. A customer may choose Data Box for a one-time or the occasional cloud migration or an initial bulk data transfer followed by periodic transfers.Considerations for Cloud Migrations Using Azure Data BoxAzure Data Box is a good solution to consider if online data transfer is not possible either because the network bandwidth is limited or because it can take too long.There are three different types of physical Data Box solutions based on data size:Data Box: This device has 100TB capacity and uses standard NAS protocols and common copy tools. It features AES 256-bit encryption for safer transit.Data Box Heavy: This larger device is designed to lift 1PB of data to the cloud.Data Box Discs: Discs have capacity of 8TB SSD with a USB/SATA interface featuring 128-bit encryption.Customers can buy in packs of up to five for a total of 40TB.
https://www.komprise.com/glossary_terms/azure-data-box/
Post your Comments and Discuss Microsoft DP-300 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the DP-300 content, but please register or login to continue.