Courseiva
Plan and implement data platform resourceseasyMultiple ChoiceObjective-mapped

DP-300 Plan and implement data platform resources Practice Question

Your company is deploying a new application that will use Azure SQL Database. You need to ensure that all connections to the database use Microsoft Entra ID authentication. Which step is required to enable this?

⚠ Common exam trap

Watch out — candidates often confuse the server-level Entra ID administrator configuration (a prerequisite) with the creation of contained database users (a downstream step), leading them to select Option C as the first required step.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Configure an Entra ID administrator for the Azure SQL logical server.

To enforce Microsoft Entra ID authentication for all connections to Azure SQL Database, you must first configure an Entra ID administrator at the logical server level. This step establishes the server’s trust relationship with the Entra ID tenant, enabling token-based authentication using OAuth 2.0. Without this administrator, Entra ID authentication cannot be used, and only SQL authentication would be available.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Configure an Entra ID administrator for the Azure SQL logical server.

    Why this is correct

    Setting an Entra ID administrator enables Entra ID authentication for the server.

  • Enable the Azure SQL Database firewall to allow only Entra ID IP addresses.

    Why it's wrong here

    Firewall controls network access, not authentication.

  • Create a contained database user mapped to an Entra ID identity.

    Why it's wrong here

    Requires an Entra ID administrator to be set first.

  • Set the database to read-only mode.

    Why it's wrong here

    Read-only mode does not enable Entra ID authentication.

Go deeper

Related to this question

About these practice questions

One of 906 original DP-300 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This DP-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-300 exam.