Microsoft Azure Security Engineer Associate AZ-500 Practice Question
An Azure App Service web app has a system-assigned managed identity. The app must connect to an existing Azure SQL Database named DB1 by using Microsoft Entra authentication and the principle of least privilege. After you sign in to DB1 with the configured Microsoft Entra administrator, which action should you perform so the web app can authenticate successfully?
Store a SQL authentication user name and password for DB1 in the web app's application settings.
Run CREATE USER [webAppName] FROM EXTERNAL PROVIDER; in DB1 and grant the required permissions.
In the master database, run CREATE LOGIN [webAppName] FROM EXTERNAL PROVIDER; and grant access to DB1.
Assign the web app's managed identity as the Microsoft Entra administrator for the SQL server.
A system-assigned managed identity is represented in Microsoft Entra ID as a service principal. To let that identity authenticate to an Azure SQL Database with minimum scope, create a contained database user that maps to the service principal by running CREATE USER [<service-principal-name>] FROM EXTERNAL PROVIDER; inside DB1 and then grant only the permissions the application requires. Creating a server-level login in the master database is supported but grants broader rights than necessary. Making the managed identity the Microsoft Entra administrator would give full administrative access, and storing SQL credentials would switch to SQL authentication instead of Microsoft Entra authentication.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Microsoft Entra authentication?
Open an interactive chat with Bash
How does a system-assigned managed identity work in Azure?
Open an interactive chat with Bash
What is the principle of least privilege in Azure security?
Open an interactive chat with Bash
Microsoft Azure Security Engineer Associate AZ-500
Secure compute, storage, and databases
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .