Exam 70-762 All Questions

View all questions & answers for the 70-762 exam

Exam 70-762 topic 1 question 112 discussion

Actual exam question from Microsoft's 70-762

Question #: 112
Topic #: 1

HOTSPOT -
A database administrator needs to perform specific actions for objects in the database.
You need to ensure the administrator can perform the tasks using the principle of least privilege.
Which schema permissions should you assign? To answer, select the appropriate permissions for each task in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

References:
https://docs.microsoft.com/en-us/sql/t-sql/statements/alter-schema-transact-sql?view=sql-server-2017#permissions https://docs.microsoft.com/en-us/sql/relational-databases/collations/set-or-change-the-database-collation?view=sql-server-2017 https://docs.microsoft.com/en-us/sql/t-sql/statements/drop-schema-transact-sql?view=sql-server-2017 https://docs.microsoft.com/en-us/sql/relational-databases/tables/rename-tables-database-engine?view=sql-server-2017 https://docs.microsoft.com/en-us/sql/t-sql/statements/alter-database-transact-sql?view=sql-server-2017#permissions

by Brandontay09 at Feb. 13, 2020, 8:30 p.m.

Comments

Submit Cancel

strikersree

Highly Voted 4 years, 12 months ago

Read the question carefully. It says Schema permission: 1.ALTER 2.ALTER 3.ALTER 4.ALTER

upvoted 17 times

...

Brandontay09

Highly Voted 5 years, 4 months ago

Are they really all ALTER?

upvoted 8 times

als2kool

5 years, 3 months ago

Yes they are all alter

upvoted 2 times

JohnFan

5 years, 3 months ago

The principle of least privilege (POLP), an important concept in computer security, is the practice of limiting access rights for users to the bare minimum permissions they need to perform their work.

upvoted 2 times

LeonLeon

4 years, 11 months ago

ALTER Confers the ability to change the properties, except ownership, of a particular securable. When granted on a scope, ALTER also bestows the ability to alter, create, or drop any securable that is contained within that scope. For example, ALTER permission on a schema includes the ability to create, alter, and drop objects from the schema. https://docs.microsoft.com/en-us/sql/relational-databases/security/permissions-database-engine?view=sql-server-ver15#_conventions

upvoted 4 times

...

kiri2020

4 years, 6 months ago

Yes, and I passed the exam with 960 score. The question I answered wrong (and it didn't let me to go back to fix it) was about schema. There were 3 those questions about what to do so that user doesn't have to type schema name to execute procedure, you either change user default schema to that schema name, or you move that proc to dbo schema (if user's default schema is dbo, which is default).

upvoted 7 times

...

MML

Most Recent 4 years, 11 months ago

Schema Permissions: All answers are 'Alter'

upvoted 4 times

...

Anette

4 years, 12 months ago

When granting permissions you want to follow the principle of least privilege. Least privilege means that you give a principal exactly the permissions it needs to accomplish a task—no more and no less. By adhering to the principle of least privilege, you take a major step in securing a database. If the only thing a principal can do in a database is read some product information, the principal will not be able—intentionally or accidentally—to delete the contents of a table. You are essentially building a tight container around what the principal can do. ALTER: Confers permission to change the properties of the securable object, except to change ownership. This permission implies other permissions to alter, create, and drop objects within the same scope. For example, an ALTER permission on a database includes permission to alter tables and schemas.

upvoted 4 times

Anette

4 years, 12 months ago

https://www.sqlservercentral.com/steps/stairway-to-sql-server-security-level-4-permissions I thinks the answer is true, they are all ALTER

upvoted 11 times

...

5 years, 4 months ago

1. EXECUTE 2.CONTROL 3.ALTER 4. INSERT

upvoted 1 times

Twigit

5 years, 4 months ago

Execute will not allow you to create stored procedures, only execute them. Insert will not allow you to drop tables, only insert into them. I would say Alter, Control, Alter, Alter

upvoted 4 times

JohnFan

5 years, 3 months ago

The principle of least privilege states that users should be given the least amount of privilege to perform their jobs. Overly ambitious granting of responsibilities, roles, grants — especially early on in an organization's life cycle when people are few and work needs to be done quickly — often leaves a system wide open for abuse. User privileges should be reviewed periodically to determine relevance to current job responsibilities.

upvoted 2 times

...