Exam 70-462 topic 2 question 205 discussion

Actual exam question from Microsoft's 70-462

Question #: 205
Topic #: 2

Note: This question is part of a series of questions that use the same set of answer choices. An answer choice may be correct for more than one question in the series.
You administer a SQL Server database server that contains a database named SalesDb. SalesDb contains a schema named Customers that has a table named
Regions. A user named UserA is a member of a role named Sales.
UserA is granted the Select permission on the Regions table. The Sales role is granted the Select permission on the Customers schema.
You need to ensure that UserA is disallowed to select from the Regions table.
Which Transact-SQL statement should you use?

A. DENY SELECT ON Object::Regions FROM Sales
B. DENY SELECT ON Schema::Customers FROM Sales
C. REVOKE SELECT ON Object::Regions FROM Sales
D. REVOKE SELECT ON Schema::Customers FROM Sales
E. DENY SELECT ON Object::Regions FROM UserA
F. DENY SELECT ON Schema::Customers FROM UserA
G. REVOKE SELECT ON Object::Regions FROM UserA
H. REVOKE SELECT ON Schema::Customers FROM UserA
I. EXEC sp_addrolemember 'Sales', 'UserA'
J. EXEC sp_droprolemember 'Sales', 'UserA'

Show Suggested Answer

Suggested Answer: C 🗳️

by mr_corte at Dec. 3, 2019, 7:41 a.m.

Comments

Submit Cancel

mr_corte

Highly Voted 5 years, 6 months ago

G. REVOKE SELECT ON Object::Regions FROM UserA

upvoted 6 times

...

mickeygeorge

Most Recent 4 years, 5 months ago

Is it not DENY SELECT ON OBJECT::Regions TO UserA because UserA is a member of the Sales Role which is allowed to select from any table in the Customers schema and therefore a REVOKE won't be enough to prevent UserA from getting access to the Regions table

upvoted 1 times

...

davidkuz

5 years, 2 months ago

G. Revoke will take away User A select permissions but not his select permissions on the Customers schema via the Sales role. I think it should be a deny select E.

upvoted 4 times

Deju

4 years, 9 months ago

That is how it should be! UserA should continue to have the select permission on the customer schema. Revisit the question and that is what the requirement says.

upvoted 1 times

Deju

4 years, 9 months ago

If UserA has to be disallowed the select permission on Customer Schema, the REVOKE should be on the Schema; NOT on the object (Table).

upvoted 1 times

...

Ealu

5 years, 5 months ago

G.Revoke Select on Object::Region From UserA

upvoted 4 times

...