Exam DP-300 All Questions

View all questions & answers for the DP-300 exam

Exam DP-300 topic 16 question 2 discussion

Actual exam question from Microsoft's DP-300

Question #: 2
Topic #: 16

DRAG DROP -
You need to configure user authentication for the SERVER1 databases. The solution must meet the security and compliance requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Show Suggested Answer

Suggested Answer:

Scenario: Authenticate database users by using Active Directory credentials.
The configuration steps include the following procedures to configure and use Azure Active Directory authentication.
1. Create and populate Azure AD.
2. Optional: Associate or change the active directory that is currently associated with your Azure Subscription.
3. Create an Azure Active Directory administrator. (Step 1)
4. Connect to the databases using an Azure AD account (the Administrator account that was configured in the previous step). (Step 2)
5. Create contained database users in your database mapped to Azure AD identities. (Step 3)
Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?tabs=azure-powershell

by Id909 at May 29, 2021, 5:35 a.m.

Comments

Submit Cancel

Id909

Highly Voted 2 years, 6 months ago

It should be D,E,C - You have to connect to the databases ,with the AD account and then to create contained users . " To create an Azure AD-based contained database user (other than the server administrator that owns the database), connect to the database with an Azure AD identity, as a user with at least the ALTER ANY USER permission. "

upvoted 14 times

chigar

2 years, 3 months ago

Yes, this is more appropriate than the given answer since the question is what steps to take in configuring user accounts and this doesn't include log in as the users created.

upvoted 1 times

...

amazonalex

Most Recent 7 months, 3 weeks ago

answer might be correct if #2 means connecting to database using AD admin account(in order to create contained db users)

upvoted 3 times

...

eric0718

1 year, 7 months ago

Answer is correct

upvoted 1 times

...

haby

1 year, 9 months ago

Create and populate Azure AD. Optional: Associate or change the active directory that is currently associated with your Azure Subscription. Create an Azure Active Directory administrator.(D) Configure your client computers. Create contained database users in your database mapped to Azure AD identities.(C) Connect to your database by using Azure AD identities.(E)

upvoted 2 times

TheDataGuy

11 months, 1 week ago

https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-overview?view=azuresql#overview I see the link you're looking at. It's just a bit confusing on which should come first. Do we create the contained db users and then connect or we connect first then we create the contained db users?

upvoted 1 times

TheDataGuy

11 months, 1 week ago

After I thought about it, I think you are right: 1- Create an Azure AD Admin. 2- Create contained DB users in your db mapped to Azure AD identities. 3- Connect to your DB by using the Azure AD identities (which we mapped in step 2 to the contained db users). with that said the provided answer has the wrong order for step 2 and 3

upvoted 3 times

Pranava_GCP

7 months, 1 week ago

2. CREATE USER [[email protected]] FROM EXTERNAL PROVIDER;

upvoted 1 times

...

Fer079

11 months, 1 week ago

I agree with you. Also I have seen the same question on MeasureUp

upvoted 1 times

Fer079

11 months ago

I have been reviewing the related question in Measure Up but that question requests a different thing (Create a database user and use it to verify the authentication). So for this one, I think the correct answer is: - Create Azure AD admin for the logical server - Connect to the dbs by using an Azure AD account (I understand that this is the Azure AD Admin account) - Create the contained users

upvoted 1 times

...

CaptainJameson

1 year, 9 months ago

- Create Azure AD admin for the logical server - Connect to the dbs by using an Azure AD account - Create the contained users You need to configure the azure AD admin before you can user AD accounts. As the article describes also, you would then need to login to each db with an azure AD account to be able to create new contained users referencing AD users.

upvoted 2 times

...

learnazureportal

2 years, 1 month ago

The Given answer is correct.

upvoted 2 times

...

weiyiao

2 years, 4 months ago

It should be B, E, C

upvoted 1 times

...

Eleonora77

2 years, 5 months ago

I also think answer is correct only 2nd and 3rd options should be the reverse

upvoted 2 times

...

DAXU

2 years, 6 months ago

In this link, the example described the question. https://docs.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-overview I think the given answer is correct, it just omitted part of sentence as in the link (the connect to db and then) create contained user. For E, it needs to say connect to the database with an Azure AD administrator, so you can create contained user. But the text just say "A azure AD", so really poor wording

upvoted 2 times

...