DP-300 Certification Practice Question #79

Question

You have an Azure subscription that contains a server named Server1. Server1 hosts two Azure SQL databases named DB1 and DB2.
You plan to deploy a Windows app named App1 that will authenticate to DB2 by using SQL authentication.
You need to ensure that App1 can access DB2. The solution must meet the following requirements:
✑ App1 must be able to view only DB2.
✑ Administrative effort must be minimized.
What should you create?

Accepted Answer

To allow `App1` to authenticate using SQL authentication while restricting it to viewing and accessing only `DB2` (and not `DB1`), you should create a contained database user on `DB2` (A). A server login (B) would reside in the `master` database and allow the application to view all databases on the server. Contained database users authenticate directly against the database they belong to, isolating them from other databases on the logical server. Other contained user types like C (external provider) and D (Windows login) do not use SQL authentication.

More DP-300 practice questions