Courseiva
Implement a secure environmentmediumMultiple ChoiceObjective-mapped

DP-300 Implement a secure environment Practice Question

Exhibit

Refer to the exhibit.

```
ALTER DATABASE SCOPED CREDENTIAL MyCred
WITH IDENTITY = 'Managed Identity';
```

You are troubleshooting a connection issue from Azure SQL Database to Azure Storage using a managed identity. The above credential was created. What is missing from this configuration?

⚠ Common exam trap

Many exam-takers assume the SECRET parameter is optional or only needed for passwords, but in managed identity scenarios, it is mandatory to specify the identity's client ID as the SECRET to enable token-based authentication.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The credential is missing the SECRET parameter.

The credential is missing the SECRET parameter because when using a managed identity to access Azure Storage from Azure SQL Database, the credential must specify the identity's client ID or object ID as the SECRET. Without this, the credential cannot authenticate to the storage account, causing the connection to fail. The SECRET parameter is required to map the managed identity to the credential for Azure AD authentication.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The credential is missing the SECRET parameter.

    Why this is correct

    Correct: For managed identity, SECRET must be specified, even if empty string.

  • The credential should be a server-level credential.

    Why it's wrong here

    Incorrect: Database scoped credential is appropriate for database access.

  • The credential lacks a valid identity.

    Why it's wrong here

    Incorrect: IDENTITY is specified as 'Managed Identity'.

  • The credential needs to include the storage account name.

    Why it's wrong here

    Incorrect: Storage account name is specified in the external data source, not the credential.

About these practice questions

This DP-300 question is part of Courseiva's 906-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This DP-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-300 exam.