Implement a secure environment →hardMultiple ChoiceObjective-mapped

DP-300 Implement a secure environment Practice Question

Exhibit

{
  "properties": {
    "publicNetworkAccess": "Disabled",
    "minimalTlsVersion": "1.2",
    "azureAdOnlyAuthentication": true,
    "administratorLogin": "admin123",
    "administratorLoginPassword": "P@ssw0rd!"
  }
}

Refer to the exhibit. You are reviewing an Azure Resource Manager template for deploying an Azure SQL Database server. The template sets publicNetworkAccess to Disabled, minimalTlsVersion to 1.2, and azureAdOnlyAuthentication to true. However, the deployment fails with an error. What is the most likely cause?

⚠ Common exam trap

Many candidates assume the deployment fails due to a missing private endpoint or password issue, but the real conflict is the simultaneous presence of SQL admin credentials and Azure AD-only authentication, which the ARM template validation explicitly rejects.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

When azureAdOnlyAuthentication is true, the administratorLogin and administratorLoginPassword properties must not be specified

When azureAdOnlyAuthentication is set to true in an Azure SQL Database ARM template, the administratorLogin and administratorLoginPassword properties must be omitted because Azure AD authentication replaces SQL authentication as the sole identity provider. Including these properties causes a validation conflict, as the deployment expects no SQL admin credentials when Azure AD-only authentication is enabled.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
minimalTlsVersion 1.2 is not supported in Azure SQL Database
Why it's wrong here
TLS 1.2 is supported and recommended.
✗
publicNetworkAccess Disabled requires a private endpoint to be defined in the same template
Why it's wrong here
A private endpoint can be created separately, but it is not mandatory in the same template.
✓
When azureAdOnlyAuthentication is true, the administratorLogin and administratorLoginPassword properties must not be specified
Why this is correct
Azure AD-only authentication disables SQL authentication, so providing SQL admin credentials is invalid.
✗
The password does not meet complexity requirements
Why it's wrong here
The password 'P@ssw0rd!' meets typical complexity requirements.

Go deeper

DP-300 Implement a secure environment Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question