Courseiva
Implement a secure environmenteasyMultiple ChoiceObjective-mapped

DP-300 Implement a secure environment Practice Question

You are configuring a new Azure SQL Database. The company policy requires that all connections use Microsoft Entra authentication and that no SQL authentication accounts exist. What should you do to prevent creation of SQL authenticated logins?

⚠ Common exam trap

Candidates often confuse network-level controls (like disabling public network access) with authentication-level controls, or assume that auditing or post-creation removal of the SQL admin is sufficient to enforce a no-SQL-authentication policy.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Set the 'DisallowSqlAuthentication' property to 'True' on the logical server.

Setting the 'DisallowSqlAuthentication' property to 'True' on the logical server enforces that only Microsoft Entra authentication can be used to connect to the Azure SQL Database. This property prevents the creation of any SQL authenticated logins, including the SQL admin account, and ensures compliance with the policy that no SQL authentication accounts exist.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Set the 'public_network_access' to 'Disabled'.

    Why it's wrong here

    This disables public network access, not SQL authentication.

  • Set the 'DisallowSqlAuthentication' property to 'True' on the logical server.

    Why this is correct

    This property explicitly disallows SQL authentication, enforcing only Microsoft Entra authentication.

  • Remove the SQL admin login after creating the database.

    Why it's wrong here

    This does not prevent creation of other SQL logins.

  • Create an Azure Policy to audit SQL authentication usage.

    Why it's wrong here

    Auditing does not prevent creation; it only reports.

Go deeper

Related to this question

About these practice questions

Courseiva writes every DP-300 question from scratch — 906 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This DP-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-300 exam.