ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam DP-300 All Questions

View all questions & answers for the DP-300 exam
Go to Exam

Exam DP-300 topic 1 question 41 discussion

Actual exam question from Microsoft's DP-300
Question #: 41
Topic #: 1
[All DP-300 Questions]

You have an Azure subscription linked to an Azure Active Directory (Azure AD) tenant. The subscription contains 10 virtual machines that run Windows Server 2019 and host Microsoft SQL Server 2019 instances.

You need to ensure that you can manage the SQL Server instances by using a single user account.

What should you do first?

  • A. Enable a user-assigned managed identity on each virtual machine.
  • B. Deploy an Azure Active Directory Domain Services (Azure AD DS) domain and join the virtual machines to the domain.
  • C. Enable a system-assigned managed identity on each virtual machine.
  • D. Join the virtual machines to the Azure AD tenant.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by KIET2131 at Feb. 18, 2023, 10:50 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
voodoo_sh
8 months ago
Selected Answer: B
I think its B - deploy domain, join VMs to domain, and then can use single domain account to connect to all SQL Servers Not A or C because managed identities are not required for VM to join to a domain. Not D because tenant is not a domain, you can't join VM to tenant
upvoted 1 times
...
Davidjsanchez
9 months, 1 week ago
Enable user assigned managed identity
upvoted 2 times
...
2f5c7cd
9 months, 1 week ago
Selected Answer: B
"... in order to leverage Azure AD autentication you can install Azure AD Connect (requires an Active Directory Domain Services instance/domain controller) or enable Azure AD login (requires an Azure VM)." https://learn.microsoft.com/en-us/answers/questions/1365794/integrating-windows-server-2019-with-azure-active A if SQL Server 2022. https://learn.microsoft.com/en-us/sql/relational-databases/security/authentication-access/azure-ad-authentication-sql-server-overview?view=sql-server-ver16#remarks
upvoted 1 times
...
bingomutant
10 months, 1 week ago
All things considered I would go for B
upvoted 1 times
...
scottytohotty
1 year, 2 months ago
Selected Answer: B
Chat gpt indicates managed identities are not used for server 2019, so B would be the better answer, imho.
upvoted 2 times
scottytohotty
1 year, 1 month ago
This may just be a horrible question with no good documentation. I've found 2 articles. One definitely indicates it can happen in Sql 2022, but the other document indicates no limitation here at all, even with 2019. I'm not sure where the article is that says it's NOT supported in 2019, as I can't seem to find it anymore. https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-azure-ad-user-assigned-managed-identity?view=azuresql https://learn.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/configure-azure-ad-authentication-for-sql-vm?view=azuresql&tabs=azure-portal I may change my answer to A...
upvoted 1 times
...
...
Vergee
1 year, 6 months ago
Selected Answer: B
To manage SQL Server instances on multiple Azure virtual machines using a single user account, you should first deploy an Azure Active Directory Domain Services (Azure AD DS) domain and join the virtual machines to the domain (Option B)12. Azure Active Directory Domain Services provides managed domain services such as domain join, group policy, LDAP, and Kerberos/NTLM authentication. By joining the virtual machines to the Azure AD DS domain, you can centralize the management of user accounts, which simplifies the process of managing SQL Server instances across multiple virtual machines.
upvoted 2 times
...
yyc585
1 year, 7 months ago
Selected Answer: B
Answer B. Enabling a user-assigned managed identity on each virtual machine is not required to solve the above scenario. User-assigned managed identities are used to authenticate to services that support Azure AD authentication, such as Azure Key Vault, without requiring the use of credentials in your code. Add Azure Active Directory User to Azure SQL Database. https://stackoverflow.com/questions/45044760/add-azure-active-directory-user-to-azure-sql-database. Add an existing Azure subscription to your tenant - Microsoft Entra .... https://learn.microsoft.com/en-us/entra/fundamentals/how-subscriptions-associated-directory.
upvoted 1 times
...
bsk1983
1 year, 11 months ago
Selected Answer: A
As per below Microsoft URL, I believe answer is A - Enable user Assigned managed Identity....... . Is Azure Active Directory Domain Services (Azure AD DS) supported with SQL Server on Azure VMs? No. Using Azure Active Directory Domain Services (Azure AD DS) isn't currently supported with SQL Server on Azure VMs. Use an Active Directory domain account instead. https://learn.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/frequently-asked-questions-faq?view=azuresql
upvoted 3 times
durdic
11 months, 2 weeks ago
Then it's kind of funny. See the question 41 {SQLVM1 and Server1 are joined to an Active Directory Domain Services (AD DS) domain; while SQLVM1 is an instance of SQL Server on Azure Virtual Machines}. Hopefully this question won't appear in the exam.
upvoted 1 times
durdic
11 months, 2 weeks ago
Sorry, I meant the Question 60 (Topic 1).
upvoted 1 times
...
...
...
testdumps2017
1 year, 11 months ago
I will go with B. https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview - check the video, it shows what is the purpose of Managed Identity - basically to get rid of passwords in code (among other things), so it has nothing to do with server management.
upvoted 2 times
...
Adamus2077
1 year, 11 months ago
Selected Answer: B
According to the article below we can use managed identity on azure vm only on SQL Server 2022. In the question is 2019, so the answer is B. https://learn.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/configure-azure-ad-authentication-for-sql-vm?view=azuresql&tabs=azure-portal
upvoted 2 times
ofzrgrz
1 year, 11 months ago
no mention of "Active Directory Domain Services (Azure AD DS)" on this page though
upvoted 1 times
...
...
bakamon
2 years, 2 months ago
Selected Answer: B
deploy an Azure Active Directory Domain Services (Azure AD DS) domain and join the virtual machines to the domain . This will allow you to use a single domain user account to manage the SQL Server instances on all of the virtual machines. a user-assigned managed identity can be associated with more than one Azure resource. However, in this scenario, the goal is to manage the SQL Server instances using a single user account. While using a user-assigned managed identity would allow you to authenticate to Azure resources using a single identity, it would not provide a way to manage the SQL Server instances using a single user account.
upvoted 1 times
...
cutek
2 years, 3 months ago
Selected Answer: A
The same user-assigned managed identity can be associated with more than one Azure resource.
upvoted 2 times
...
Motanel
2 years, 3 months ago
I think it is B, because of this: "by using a single user account".
upvoted 1 times
...
TheMCT
2 years, 4 months ago
Selected Answer: B
Correct ans. B
upvoted 2 times
...
CloudTech@2023
2 years, 4 months ago
Selected Answer: A
I thing Answer A is correct because of this link: https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview
upvoted 3 times
...
KIET2131
2 years, 5 months ago
B is correct
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel