MENU
You have an Azure subscription that contains an instance of SQL Server on an Azure virtual machine named SQLVM1 and a user named User1. SQLVM1 hosts a database named DB1.
You need to ensure that User! can create a scheduled task to perform a full backup of DB1. The solution must use the principle of least privilege.
Which built-in database role should you assign to User1?
Suggested Answer: C
Get Premium DP-300 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
28 comments · newest first
LA
Larue
11 months ago
Wait, can User1 really create a backup task with just that role? Seems too limited.
CA
Casie
11 months ago
I agree, SQLAgentUserRole is the safest option!
RO
Rossana
11 months ago
SQLAgentOperatorRole sounds good too, but not sure if it's least privilege.
OD
Odette
12 months ago
Definitely not db.owner, that's too much access!
DE
Dewitt
12 months ago
I think SQLAgentUserRole is the right choice here.
NE
Nelida
1 year ago
I’m leaning towards SQLAgentUserRole as well, but I wonder if SQLAgentReaderRole could work too since it’s about reading job information.
MA
Matthew
1 year ago
I feel like db.owner is definitely too broad for this scenario; we should stick to the least privilege principle.
RA
Raymon
1 year ago
I remember practicing a similar question, and I think the SQLAgentOperatorRole might be too much access for just creating a backup task.
EM
Emelda
1 year ago
I think User1 needs the SQLAgentUserRole since it allows creating jobs, but I'm not entirely sure if that's the best choice for backups.
VI
Viva
1 year ago
I'm a bit confused by the different SQL Server roles listed here. I'll need to review the details of each one to determine which one would allow User1 to create the scheduled backup task without giving them unnecessary permissions.
LA
Lang
1 year ago
The question mentions the principle of least privilege, so I'm guessing we want to give User1 the minimum permissions required to accomplish the task. Based on the options, the SQLAgentUserRole seems like the best fit since it's specifically for managing SQL Agent jobs.
KE
Kenneth
1 year ago
Hmm, I'm not entirely sure about this one. I know we need to give User1 the ability to create a scheduled task, but I'm not familiar with the different SQL Server database roles. I'll have to think this through carefully.
AL
Alonzo
1 year ago
This seems straightforward. I think the SQLAgentUserRole is the right choice to give User1 the ability to create a scheduled task for the database backup, while still following the principle of least privilege.
HE
Hershel
1 year ago
I'm a bit confused by the options here. Connecting Spine2 to ISN routers and configuring BIDIR-PIM don't seem directly relevant to the Cisco ACI Multi-Site setup. I'll need to think this through more carefully.
ST
Stephanie
2 years ago
Why do you think that? I thought SQLAgentOperatorRole would be the best option for least privilege.
BR
Britt
2 years ago
Hold up, I think I saw this question before. SQLAgentReaderRole sounds familiar, but I can't remember if that's the right one. Hmm...
PE
Pedro
2 years ago
I disagree, I believe the correct answer is D) SQLAgentUserRole.
DA
Daron
2 years ago
Wait, isn't db.owner a bit too much? I mean, we just need to create a backup task, not become the database owner.
DA
Dalene
2 years ago
Nah, I think it's SQLAgentUserRole. That's the one with the least privileges, so it fits the 'principle of least privilege' requirement.
PE
Pete
2 years ago
I believe SQLAgentReaderRole would be the most appropriate role for User1 in this scenario.
GL
Glenn
2 years ago
I think SQLAgentOperatorRole might be a better option for User1 to create scheduled tasks.
VI
Viola
2 years ago
I agree, SQLAgentUserRole is the correct choice for least privilege access.
ST
Stephanie
2 years ago
I think the answer is C) SQLAgentOperatorRole.
OC
Ocie
2 years ago
C'mon, it's gotta be SQLAgentOperatorRole. That's the one that lets you manage SQL Agent jobs, right?
LE
Levi
2 years ago
Actually, I agree with you. SQLAgentOperatorRole is the most suitable role for User1 to create a scheduled task for a full backup of DB1.
AR
Arthur
2 years ago
I think SQLAgentReaderRole would be the best option. It only allows the user to view SQL Agent jobs, not create or manage them.
KA
Kati
2 years ago
But wouldn't SQLAgentUserRole be more appropriate? It only allows the user to create and manage their own jobs.
LO
Lorean
2 years ago
Yes, you are correct! SQLAgentOperatorRole is the role that allows User1 to create and manage SQL Agent jobs.