DP-300 Certification Practice Question #290

Question

You need to configure user authentication for the SERVER1 databases. The solution must meet the security and compliance requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Accepted Answer

The correct three-step sequence to configure Azure AD-based user authentication for Azure SQL Database is: (1) Create an Azure AD administrator for the logical server — this designates the AD admin who can then authenticate to databases; (2) Connect to the databases by using an Azure AD account — you must connect as the AD admin (or an AD user with ALTER ANY USER) before you can create contained AD users; (3) Create contained database users — once connected as the AD admin, run `CREATE USER [name] FROM EXTERNAL PROVIDER`. The MS Learn authentication overview explicitly states that to create Azure AD-based contained database users you must "connect to the database with an Azure AD identity." Creating users before connecting as an AD identity is not possible, so C must come after E.

More DP-300 practice questions