DS0-001 Data Governance And Security Practice Question
Your organization uses Azure Active Directory for access management. You need to ensure that database administrators can only access a specific production Azure SQL instance during a scheduled 4-hour maintenance window. Which control is most appropriate?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure AD Privileged Identity Management (PIM)
Privileged Identity Management (PIM) provides just-in-time access, which is ideal for time-bound administrative access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Azure AD Privileged Identity Management (PIM)
Why this is correct
PIM allows for time-bound and approval-based access elevation.
- ✗
IP Firewall rules on the SQL Server
Why it's wrong here
Firewall rules restrict by network location, not by time or user identity.
- ✗
Service Principals with managed identity
Why it's wrong here
Managed identities are for service authentication, not manual user access.
- ✗
Azure RBAC with Conditional Access policies
Why it's wrong here
Conditional Access is for broader access conditions, PIM is specifically for time-bound privilege elevation.
- ✗
SQL Server Audit logs
Why it's wrong here
Auditing tracks access but does not enforce time-based restrictions.
About these practice questions
This DS0-001 question is part of Courseiva's 216-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official CompTIA exam blueprint
This DS0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DS0-001 exam.