Plan and implement data platform resources →hardMultiple ChoiceObjective-mapped

DP-300 Plan and implement data platform resources Practice Question

Exhibit

{
  "properties": {
    "security": {
      "azureAdAdminAuthentication": {
        "login": "admin@contoso.com",
        "sid": "00000000-0000-0000-0000-000000000000",
        "tenantId": "tenant-id",
        "type": "User"
      }
    },
    "networkAccessControl": {
      "publicNetworkAccess": "Disabled"
    },
    "firewallRules": []
  }
}

Refer to the exhibit. The exhibit shows a partial ARM template for deploying an Azure SQL Database server. You run the deployment but get an error stating the server cannot be created because of a missing firewall rule. The template has public network access disabled and no firewall rules defined. What is the most likely cause?

⚠ Common exam trap

It's easy for candidates to assume public network access disabled requires a firewall rule, but the actual cause is the invalid Entra ID admin SID, which is a subtle validation check that Azure performs regardless of network settings.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The Entra ID admin SID is invalid (all zeros).

The error occurs because the Entra ID admin SID is set to all zeros ('00000000-0000-0000-0000-000000000000'), which is an invalid GUID. Azure SQL Database requires a valid, non-zero SID (object ID) for the Entra ID admin to establish authentication. When public network access is disabled, the server can still be created without firewall rules, but the invalid SID prevents the deployment from succeeding.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The firewallRules array must include at least one rule when publicNetworkAccess is Disabled.
Why it's wrong here
When public network access is disabled, firewall rules are irrelevant.
✓
The Entra ID admin SID is invalid (all zeros).
Why this is correct
A zero GUID is not a valid SID for a user in Microsoft Entra ID.
✗
The tenantId is missing in the Entra ID admin configuration.
Why it's wrong here
TenantId is present in the template.
✗
The Entra ID admin type should be 'Group' not 'User'.
Why it's wrong here
The type can be User or Group, both are valid.

Go deeper

DP-300 Plan and implement data platform resources Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question