Microsoft Azure Security Engineer Associate AZ-500 Practice Question
You manage an Azure SQL Database server named sql1 that hosts several production databases. You must enable Microsoft Entra (Azure AD) authentication so that members of an Azure AD group named SQLSecAdmins can connect to any database on the server. What should you do first?
Assign the SQLSecAdmins group the Contributor role on the sql1 resource.
In each database on sql1, run CREATE USER [SQLSecAdmins] FROM EXTERNAL PROVIDER.
Configure an Azure AD administrator for sql1 and set the administrator to the SQLSecAdmins group.
Enable the Allow access to Azure services firewall rule on sql1.
Azure AD authentication cannot be used on an Azure SQL Database server until an Azure AD administrator has been configured for that server or managed instance. Setting the server's Azure AD admin establishes the trust relationship with the tenant and enables the creation of contained database users based on Azure AD principals. Granting Azure RBAC roles, adding firewall rules, or creating contained users prior to configuring the Azure AD admin will fail because the server is not yet aware of Azure AD identities.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the role of an Azure AD administrator for an Azure SQL Database?
Open an interactive chat with Bash
Why can't Azure RBAC roles or firewall rules enable Azure AD authentication on their own?
Open an interactive chat with Bash
What is the purpose of 'CREATE USER FROM EXTERNAL PROVIDER' in this context?
Open an interactive chat with Bash
Microsoft Azure Security Engineer Associate AZ-500
Secure compute, storage, and databases
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .