Exam DP-300 topic 2 question 29 discussion

Actual exam question from Microsoft's DP-300

Question #: 29
Topic #: 2

HOTSPOT
-

You have an Azure subscription that contains a group named Group1 and an Azure SQL managed instance that hosts a database named DB1.

You need to ensure that Group1 has read access to new tables created in DB1. The solution must use the principle of least privilege.

How should you complete the Transact-SQL statement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Daemon69 at Feb. 22, 2023, 1:17 p.m.

Comments

Submit Cancel

nova24

7 months, 1 week ago

GRANT SELECT ON SCHEMA::[schema_name] TO [Contoso\group1];

upvoted 1 times

voodoo_sh

3 months, 2 weeks ago

GRANT SELECT ON SCHEMA::[table] TO [Contoso\group1] This is based on a question, although looks a bit weird. Let's just assume they have a schema called [table] :)

upvoted 1 times

...

Daemon69

2 years, 3 months ago

The question is confusing. It states "You need to ensure that Group1 has read access to new tables created in DB1. The solution must use the principle of least privilege." If you grant to schema, then it will be specific to schema only. How about if there are two schema in the database like for example dbo and user1? So, it should be GRANT SELECT ON DATABASE::TABLE...

upvoted 3 times

Gocsan

2 years, 3 months ago

It's an incorrect syntax to use [database]::[table]. The correct answer is [schema]::[table]. https://learn.microsoft.com/en-us/sql/t-sql/statements/grant-schema-permissions-transact-sql?view=sql-server-ver16

upvoted 8 times

...