DP-203 Practice Question: Secure, monitor, and optimize data storage and data processing
You are responsible for securing an Azure Synapse Analytics workspace. You need to ensure that only authorized users can query the serverless SQL pool. Which authentication method should you use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra ID authentication
Microsoft Entra ID authentication (formerly Azure AD) is the recommended authentication method for serverless SQL pools in Azure Synapse Analytics. It provides centralized identity management, supports conditional access policies, and allows individual user identities to be used for auditing and access control. Option B (managed identity) is designed for service-to-service authentication (e.g., Azure services), not for interactive user queries. Option C (SQL authentication) is less secure as it relies on static credentials, and Microsoft recommends against it for production workloads. Option D (Azure Key Vault) is a secret store, not an authentication method.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Entra ID authentication
Why this is correct
Microsoft Entra ID authentication centralises identity and enforces role-based access control, so only authorised users obtain a token to query the serverless SQL pool. It satisfies the constraint that access must be restricted to authorised identities, unlike SQL logins, which cannot enforce Entra-native conditional access or MFA.
- ✗
Managed identity authentication
Why it's wrong here
Managed identity authentication authenticates an application or service to the serverless SQL pool; it does not authenticate interactive users, so it cannot restrict which users may query. It is tempting because it is the correct choice for service-to-service access, such as a pipeline or Synapse notebook connecting without stored credentials.
- ✗
SQL authentication
Why it's wrong here
SQL authentication uses database-level logins and passwords rather than Microsoft Entra ID identities, so it does not integrate with the workspace's centralised identity and access controls for authorising users. It is tempting because it is a legitimate authentication method for dedicated SQL pools and on-premises-style scenarios.
- ✗
Azure Key Vault authentication
Why it's wrong here
Azure Key Vault stores and manages secrets, keys and certificates; it is not an authentication provider for querying a serverless SQL pool. It is tempting because Key Vault is central to securing Synapse credentials and customer-managed keys, but it supplies secrets to services rather than authenticating end users.
Quick reference
Cloud Service Model Comparison
| Model | You Manage | Provider Manages | Examples |
|---|---|---|---|
| IaaS | OS, runtime, apps, data | Hardware, hypervisor, networking | EC2, Azure VMs, GCP Compute Engine |
| PaaS | Apps and data | OS, runtime, middleware, hardware | Elastic Beanstalk, Azure App Service |
| SaaS | Data and settings only | Everything else | Microsoft 365, Salesforce, Workday |
| FaaS / Serverless | Function code only | Infra, scaling, runtime | Lambda, Azure Functions, Cloud Run |
| CaaS | Containers and apps | Kubernetes, OS, hardware | EKS, AKS, GKE |
Go deeper
Related to this question
About these practice questions
This DP-203 question is part of Courseiva's 509-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-203 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-203 exam.