Exam DP-300 topic 7 question 9 discussion

Actual exam question from Microsoft's DP-300

Question #: 9
Topic #: 7

DRAG DROP -
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains a user named [email protected] and an Azure SQL managed instance named SQLMI1.
You need to ensure that [email protected] can create logins in SQLMI1 that map to Azure AD service principals.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Show Suggested Answer

Suggested Answer:

Box 1: Grant SQLMI1 read access to Azure AD
Give required permission.
Box 2: Run CREATE LOGIN..
Create a login.
Box 3: RUN ALTER SERVER..
Add a user to the login created in step 2.
Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/managed-instance/aad-security-configure-tutorial

by SamBalbij at Oct. 26, 2021, 10:26 a.m.

Comments

Submit Cancel

sca88

7 months, 3 weeks ago

https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?view=azuresql&tabs=azure-powershell "Your SQL Managed Instance needs permission to read Microsoft Entra ID to accomplish tasks such as authentication of users through security group membership or creation of new users. For this to work, you must grant the SQL Managed Instance permission to read Microsoft Entra ID. You can do this using the Azure portal or PowerShell." So the answer provided seems correct

upvoted 1 times

...

vcloudpmp

1 year, 5 months ago

https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?view=azuresql-mi&tabs=azure-powershell - grant read access first.

upvoted 1 times

...