Exam DP-300 All Questions

View all questions & answers for the DP-300 exam

Exam DP-300 topic 1 question 41 discussion

Actual exam question from Microsoft's DP-300

Question #: 41
Topic #: 1

You have an Azure subscription linked to an Azure Active Directory (Azure AD) tenant. The subscription contains 10 virtual machines that run Windows Server 2019 and host Microsoft SQL Server 2019 instances.

You need to ensure that you can manage the SQL Server instances by using a single user account.

What should you do first?

A. Enable a user-assigned managed identity on each virtual machine.
B. Deploy an Azure Active Directory Domain Services (Azure AD DS) domain and join the virtual machines to the domain.
C. Enable a system-assigned managed identity on each virtual machine.
D. Join the virtual machines to the Azure AD tenant.

Show Suggested Answer

Suggested Answer: B 🗳️

by KIET2131 at Feb. 18, 2023, 10:50 a.m.

Comments

Submit Cancel

voodoo_sh

4 months, 4 weeks ago

Selected Answer: B

I think its B - deploy domain, join VMs to domain, and then can use single domain account to connect to all SQL Servers Not A or C because managed identities are not required for VM to join to a domain. Not D because tenant is not a domain, you can't join VM to tenant

upvoted 1 times

...

Davidjsanchez

6 months, 1 week ago

Enable user assigned managed identity

upvoted 2 times

...

2f5c7cd

6 months, 1 week ago

Selected Answer: B

"... in order to leverage Azure AD autentication you can install Azure AD Connect (requires an Active Directory Domain Services instance/domain controller) or enable Azure AD login (requires an Azure VM)." https://learn.microsoft.com/en-us/answers/questions/1365794/integrating-windows-server-2019-with-azure-active A if SQL Server 2022. https://learn.microsoft.com/en-us/sql/relational-databases/security/authentication-access/azure-ad-authentication-sql-server-overview?view=sql-server-ver16#remarks

upvoted 1 times

...

bingomutant

7 months, 1 week ago

All things considered I would go for B

upvoted 1 times

...

scottytohotty

11 months ago

Selected Answer: B

Chat gpt indicates managed identities are not used for server 2019, so B would be the better answer, imho.

upvoted 2 times

scottytohotty

10 months, 1 week ago

This may just be a horrible question with no good documentation. I've found 2 articles. One definitely indicates it can happen in Sql 2022, but the other document indicates no limitation here at all, even with 2019. I'm not sure where the article is that says it's NOT supported in 2019, as I can't seem to find it anymore. https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-azure-ad-user-assigned-managed-identity?view=azuresql https://learn.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/configure-azure-ad-authentication-for-sql-vm?view=azuresql&tabs=azure-portal I may change my answer to A...

upvoted 1 times

...

Vergee

1 year, 3 months ago

Selected Answer: B

To manage SQL Server instances on multiple Azure virtual machines using a single user account, you should first deploy an Azure Active Directory Domain Services (Azure AD DS) domain and join the virtual machines to the domain (Option B)12. Azure Active Directory Domain Services provides managed domain services such as domain join, group policy, LDAP, and Kerberos/NTLM authentication. By joining the virtual machines to the Azure AD DS domain, you can centralize the management of user accounts, which simplifies the process of managing SQL Server instances across multiple virtual machines.

upvoted 2 times

...

yyc585

1 year, 4 months ago

Selected Answer: B

Answer B. Enabling a user-assigned managed identity on each virtual machine is not required to solve the above scenario. User-assigned managed identities are used to authenticate to services that support Azure AD authentication, such as Azure Key Vault, without requiring the use of credentials in your code. Add Azure Active Directory User to Azure SQL Database. https://stackoverflow.com/questions/45044760/add-azure-active-directory-user-to-azure-sql-database. Add an existing Azure subscription to your tenant - Microsoft Entra .... https://learn.microsoft.com/en-us/entra/fundamentals/how-subscriptions-associated-directory.

upvoted 1 times

...

bsk1983

1 year, 8 months ago

Selected Answer: A

As per below Microsoft URL, I believe answer is A - Enable user Assigned managed Identity....... . Is Azure Active Directory Domain Services (Azure AD DS) supported with SQL Server on Azure VMs? No. Using Azure Active Directory Domain Services (Azure AD DS) isn't currently supported with SQL Server on Azure VMs. Use an Active Directory domain account instead. https://learn.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/frequently-asked-questions-faq?view=azuresql

upvoted 3 times

durdic

8 months, 2 weeks ago

Then it's kind of funny. See the question 41 {SQLVM1 and Server1 are joined to an Active Directory Domain Services (AD DS) domain; while SQLVM1 is an instance of SQL Server on Azure Virtual Machines}. Hopefully this question won't appear in the exam.

upvoted 1 times

durdic

8 months, 2 weeks ago

Sorry, I meant the Question 60 (Topic 1).

upvoted 1 times

...

testdumps2017

1 year, 8 months ago

I will go with B. https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview - check the video, it shows what is the purpose of Managed Identity - basically to get rid of passwords in code (among other things), so it has nothing to do with server management.

upvoted 2 times

...

Adamus2077

1 year, 8 months ago

Selected Answer: B

According to the article below we can use managed identity on azure vm only on SQL Server 2022. In the question is 2019, so the answer is B. https://learn.microsoft.com/en-us/azure/azure-sql/virtual-machines/windows/configure-azure-ad-authentication-for-sql-vm?view=azuresql&tabs=azure-portal

upvoted 2 times

ofzrgrz

1 year, 8 months ago

no mention of "Active Directory Domain Services (Azure AD DS)" on this page though

upvoted 1 times

...

bakamon

1 year, 11 months ago

Selected Answer: B

deploy an Azure Active Directory Domain Services (Azure AD DS) domain and join the virtual machines to the domain . This will allow you to use a single domain user account to manage the SQL Server instances on all of the virtual machines. a user-assigned managed identity can be associated with more than one Azure resource. However, in this scenario, the goal is to manage the SQL Server instances using a single user account. While using a user-assigned managed identity would allow you to authenticate to Azure resources using a single identity, it would not provide a way to manage the SQL Server instances using a single user account.

upvoted 1 times

...

cutek

2 years ago

Selected Answer: A

The same user-assigned managed identity can be associated with more than one Azure resource.

upvoted 2 times

...

Motanel

2 years ago

I think it is B, because of this: "by using a single user account".

upvoted 1 times

...

TheMCT

2 years, 1 month ago

Selected Answer: B

Correct ans. B

upvoted 2 times

...

CloudTech@2023

2 years, 1 month ago

Selected Answer: A

I thing Answer A is correct because of this link: https://learn.microsoft.com/en-us/azure/active-directory/managed-identities-azure-resources/overview

upvoted 3 times

...

KIET2131

2 years, 2 months ago

B is correct

upvoted 4 times

...

Exam DP-300 All Questions

View all questions & answers for the DP-300 exam

Exam DP-300 topic 1 question 41 discussion

Comments

voodoo_sh

Davidjsanchez

2f5c7cd

bingomutant

scottytohotty

scottytohotty

Vergee

yyc585

bsk1983

durdic

durdic

testdumps2017

Adamus2077

ofzrgrz

bakamon

cutek

Motanel

TheMCT

CloudTech@2023

KIET2131

SY0-701