BenchMark Quizzes by MDFT Pro

Configure Authentication Supporting MFA and Database-Level Authentication

You work for MDFT Pro, a well-known training agency that provides Microsoft certification courses to students worldwide. Mark, the Security Architect, manages an Azure subscription that is linked to a hybrid Azure Active Directory (Azure AD) tenant. The subscription contains an Azure Synapse Analytics SQL pool named StudentAnalytics that stores large volumes of student performance data, course completion statistics, and certification tracking information. Mark needs to ensure that trainers and administrators accessing this sensitive data are properly authenticated with strong security measures.

You need to recommend an authentication solution for the StudentAnalytics SQL pool. The solution must support multi-factor authentication (MFA) to prevent unauthorized access and must provide database-level authentication to allow granular control over who can access specific databases.

What should you recommend?

Choose all correct answers from the options below.

Explanations for each answer:

Azure AD authentication is correct. Azure AD authentication supports multi-factor authentication (MFA) for enhanced security when accessing Azure Synapse Analytics.
Microsoft SQL Server authentication is incorrect. SQL Server authentication uses username and password only and does not support MFA.
Passwordless authentication is incorrect. While passwordless can support MFA, it doesn't provide the database-level authentication granularity needed for this scenario.
Windows authentication is incorrect. Windows authentication is not supported in Azure Synapse Analytics SQL pools.
Application roles is incorrect. Application roles are for authorization within the database but don't provide authentication or MFA support.
Contained database users is correct. Contained database users provide database-level authentication and can be created from Azure AD identities, enabling both MFA and database-level access control.
Database roles is incorrect. Database roles are for authorization and permission management, not for authentication.
Microsoft SQL Server logins is incorrect. SQL Server logins don't support MFA and are server-level, not database-level authentication.

Learn more about authentication in Azure Synapse:

Azure Synapse Analytics Authentication

Practice Exam

Configure Authentication Supporting MFA and Database-Level Authentication

Discuss this question on social media: