DP-300 Certification Practice Question #92

Question

You have an Azure subscription that contains a group named Group1 and an Azure SQL managed instance that hosts a database named DB1.

You need to ensure that Group1 has read access to new tables created in DB1. The solution must use the principle of least privilege.

How should you complete the Transact-SQL statement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

The question requires read access to **new** tables created in DB1 using least privilege. A schema-level GRANT SELECT automatically covers all current and future tables within that schema — this is precisely why schema-level is appropriate for "new tables." A table-level grant would require re-granting for each new table. SELECT is the least-privilege read permission. The image shows the [table] identifier as the schema name placeholder, making the full statement: `GRANT SELECT ON SCHEMA::[table] TO [Contoso\group1]`.

More DP-300 practice questions