Exam 70-765 topic 3 question 42 discussion

Actual exam question from Microsoft's 70-765

Question #: 42
Topic #: 3

You use a contained database named ContosoDb within a domain.
You need to create a user who can log on to the ContosoDb database. You also need to ensure that you can port the database to different database servers within the domain without additional user account configurations.
Which type of user should you create?

A. SQL user without login
B. User mapped to an asymmetric key
C. Domain user
D. login mapped to a virtual account

Show Suggested Answer

Suggested Answer: C 🗳️
If the service must interact with network services, access domain resources like file shares or if it uses linked server connections to other computers running SQL
Server, you might use a minimally-privileged domain account. Many server-to-server activities can be performed only with a domain user account.
References:
https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/configure-windows-service-accounts-and-permissions

by MelKr at April 28, 2020, 4:50 p.m.

Comments

Submit Cancel

MelKr

5 years, 1 month ago

The question asks for a new user login not the service account. To me Answer A: "SQL user without Login" would be valid as well. Nevertheless, a domain account should always be preferred over a SQL Account.

upvoted 1 times

Cococo

4 years, 7 months ago

"If the service must interact with network services, access domain resources like file shares or if it uses linked server connections to other computers....."

upvoted 1 times

...