Exam DP-200 topic 1 question 21 discussion

Admin user is defined at server level. Answer is B

All resources --> Active Directory Admin --> Set Admin Answer is B

the correct answer is B 100%

The question mentions migrating just 'one' database. Do we need to grant admin access to a DB server (group of DBs) ? Doesn't go with the minimal access practice. Don't agree with B.

correct answer is B. I did a practical implementation for the same

Just created a new Azure SQL server and a new Azure sql DB. Answer it B.

Azure AD admin with a server in SQL Database Each server in Azure (which hosts SQL Database or Azure Synapse) starts with a single server administrator account that is the administrator of the entire server. Create a second administrator account as an Azure AD account. This principal is created as a contained database user in the master database of the server. Administrator accounts are members of the db_owner role in every user database, and enter each user database as the dbo user. https://docs.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?tabs=azure-powershell The correct answer is : B

Correct answer is B

C is Right , Under SQL Server -> select SQL database -> Select ACTIVE DIRETORY ADMIN -> Set Admin -> Select User or Azure AD group -> Save them as Admin role (Az AD Admin of the SQL database) https://docs.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-configure?tabs=azure-powershell#provision-azure-ad-admin-sql-database

As per below link, the answer should be B. https://docs.microsoft.com/en-us/azure/azure-sql/database/logins-create-manage

EDIT. C is correct. As mentioned in the answer there are two accounts, with admin permissions to a database. Server Admin Login and Active Directory Admin. Server Admin is I guess nothing to do with AD. Go to "Properties" tab for Azure Database for reference. It is mentioned there

C is correct. As mentioned in the answer there are two accounts, with admin permissions to a database. Server Admin Login and Active Directory Admin. Server Admin is I guess nothing to do with AD. Go to "Performance" tab for Azure Database for reference. It is mentioned there

From link https://docs.microsoft.com/en-us/azure/azure-sql/database/logical-servers: When you create a server, you provide a server login account and password that has administrative rights to the master database on that server and all databases created on that server. This initial account is a SQL login account. Azure SQL Database and Synapse Analytics support SQL authentication and Azure Active Directory Authentication for authentication. Answer is B

C - Practically it makes sense to configure previliges at database level than SQL server level.

Using AD as administrator for SQL Databases should be on a Database level. (Check diagaram in this page) ---> https://docs.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-overview

Answer is C An Azure AD administrator must be configured if you want to use Azure AD accounts to connect to SQL Database, SQL Managed Instance, or Azure Synapse. Refer https://docs.microsoft.com/en-us/azure/azure-sql/database/logins-create-manage

B: Admin is at server level. not C: as each server in Azure (which hosts SQL Database) starts with a single server administrator account that is the administrator of the entire server. i.e. Admin at server level. not D: as role-based access control (RBAC) applies only to the Azure portal and isn't propagated to SQL Database.