Exam DP-300 topic 2 question 39 discussion

Actual exam question from Microsoft's DP-300

Question #: 39
Topic #: 2

HOTSPOT
-

You have an Azure subscription.

You need to deploy a logical SQL server by using PowerShell. The solution must ensure that the logical SQL server can create Azure AD users and provide Transparent Data Encryption (TDE) with a customer-managed key.

How should you complete the command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by vcloudpmp at July 15, 2023, 12:25 a.m.

Comments

Submit Cancel

bsk1983

Highly Voted 1 year, 9 months ago

from URL, I see the first option should be "Assigned Identity". Answer should be "Assigned Identity" and "Key id" https://learn.microsoft.com/en-us/powershell/module/az.sql/new-azsqlserver?view=azps-10.2.0#code-try-3

upvoted 9 times

voodoo_sh

5 months, 3 weeks ago

Agree: -AssignIdentity Generate and assign a Microsoft Entra identity for this server for use with key management services like Azure KeyVault. - KeyID The Azure Key Vault URI that is used for encryption (TDE)

upvoted 2 times

...

ofzrgrz

Highly Voted 1 year, 9 months ago

Provided answer seems wrong. There was no indication of cross-tenant CMK in the question so FederatedClientId would be absurd. AssignIdentity and keyId seems like the default good answer

upvoted 5 times

...

nova24

Most Recent 7 months, 2 weeks ago

Dropdown1: -AssignIdentity Dropdown2: -KeyId

upvoted 1 times

...

Avacato

1 year, 10 months ago

To create a new Azure SQL database with TDE enabled and CMK (customer-managed key) you need to specify -AssignIdentity and -KeyId parameters. https://learn.microsoft.com/en-us/powershell/module/az.sql/new-azsqlserver?view=azps-10.1.0#example-3-create-a-new-azure-sql-database-server-with-tde-cmk

upvoted 4 times

...

vcloudpmp

1 year, 11 months ago

https://learn.microsoft.com/en-us/powershell/module/az.sql/new-azsqlserver?view=azps-10.1.0 -federated parameter is only for cross-account CMK. - -AssignIdentity Generate and assign an Azure Active Directory Identity for this server for use with key management services like Azure KeyVault.

upvoted 2 times

...