DP-300 Certification Practice Question #100

Question

You have an Azure subscription.

You need to deploy a logical SQL server by using PowerShell. The solution must ensure that the logical SQL server can create Azure AD users and provide Transparent Data Encryption (TDE) with a customer-managed key.

How should you complete the command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

Two requirements: (1) enable Azure AD users → requires the server to have a managed identity (-AssignIdentity) so it can act as a Microsoft Entra admin; (2) TDE with customer-managed key → requires specifying the Azure Key Vault key URI (-KeyId). The -FederatedClientId parameter is only for cross-tenant scenarios, which is not indicated here. The command structure with the Key Vault URL as the last argument aligns exactly with `-KeyId` being the second dropdown.

More DP-300 practice questions