DP-300 Implement a secure environment Practice Question
A developer reports that they cannot connect to an Azure SQL Database using Azure AD authentication. The developer is a member of an Azure AD group that has been granted db_datareader role in the database. The connection string uses Active Directory Password authentication. What is the most likely issue?
⚠ Common exam trap
A common mix-up: candidates confuse Azure AD group membership with database user creation, assuming that granting a role to an Azure AD group automatically grants database access, when in fact a separate database user must be created for the group.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The Azure AD group has not been created as a database user.
The most likely issue is that the Azure AD group has not been created as a database user in the SQL Database. Even though the group has been granted the db_datareader role at the Azure AD level, Azure SQL Database requires that the group be explicitly mapped to a database user via the CREATE USER [group name] FROM EXTERNAL PROVIDER statement. Without this mapping, the group's membership does not translate into database-level permissions, and the developer's authentication will fail.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The Azure AD group has not been created as a database user.
Why this is correct
Azure AD groups must be mapped to a database user using CREATE USER [group] FROM EXTERNAL PROVIDER.
- ✗
The server firewall is blocking the connection.
Why it's wrong here
Firewall rules are IP-based; if the developer can reach the server, the issue is likely authentication.
- ✗
The developer's IP address is not allowed.
Why it's wrong here
Same as above; firewall would block any connection.
- ✗
Multi-factor authentication is required but not configured.
Why it's wrong here
Active Directory Password authentication does not require MFA.
Go deeper
Related to this question
Learn chapter
Overview of Azure Data Platform Options
Key term
Azure SQL Performance Tuning
Azure SQL Performance Tuning is the process of optimizing the speed and efficiency of queries and database operations in Microsoft Azure SQL Database or SQL Managed Instance to reduce latency and improve throughput.
About these practice questions
Courseiva writes every DP-300 question from scratch — 906 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This DP-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-300 exam.