46.
To which of the following fixed database roles should you add a database user if you
want to grant the ability to manage database access for logins without assigning
unnecessary privileges?
- A.db_owner
- B.db_accessadmin
- C.db_securityadmin
- D.db_ddladmin
- Answer & Explanation
- Report
Answer : [B]
Explanation :
Explanation :
|
A. Incorrect: You should not add the user to the db_owner role. This role is granted
all permissions at the database level. B. Correct: You should add the user to the db_accessadmin role because this will grant the ability to manage database access for logins without conferring unnecessary privileges. C. Incorrect: You should not add the user to the db_securityadmin role because members of this role can manage the membership of other roles and can grant themselves almost any privilege at the database level. D. Incorrect: You should not add the user to the db_ddladmin role because members of this role can run any Data Definition Language (DDL) command in the database. |
47.
Which of the following steps must you take before you can create a database that
allows database logins that do not map to a SQL Server login?
- A.Enable contained database authentication at the instance level.
- B.Disable contained database authentication at the instance level. Create a userdefined server role.
- C.Create a flexible database role.
- D.Create a user-defined server role.
- Answer & Explanation
- Report
Answer : [A]
Explanation :
Explanation :
|
A. Correct: You must enable contained database authentication at the instance level
before you can create a database that allows database logins that do not map to a
SQL Server login. B. Incorrect: You can use database logins that do not map to a SQL Server login only if contained database authentication is enabled at the instance level. C. Incorrect: The existence of flexible database roles does not influence whether you can create databases that support contained users. D. Incorrect: The existence of user-defined server roles does not influence whether you can create databases that support contained users. |
48.
Which permission must you assign on a table if you want to allow a database user to
view the information in that table?
- A.REFERENCE
- B.INSERT
- C.UPDATE
- D.SELECT
- E.SEMANTICSIMILARITYDETAILSTABLE()
- Answer & Explanation
- Report
Answer : [D]
Explanation :
Explanation :
|
A. Incorrect. The REFERENCE permission enables a principal to reference the
securable. B. Incorrect. The INSERT permission enables a principal to add data to the securable. C. Incorrect. The UPDATE permission enables a principal to modify the data stored in an executable. D. Correct. The SELECT permission enables a principal to view data stored in the securable. |
49.
You want to configure permissions on a table so that members of a database role are
allowed to insert data into a table but cannot change existing data in that table. Which
of the following permissions should you assign?
- A.REFERENCE
- B.INSERT
- C.RECEIVE
- D.UPDATE
- Answer & Explanation
- Report
Answer : [B]
Explanation :
Explanation :
|
A. Incorrect. The REFERENCE permission enables a principal to reference the
securable. B. Correct. The INSERT permission enables a principal to add data to the securable. C. Incorrect. The RECEIVE permission enables a principal to receive messages from the service broker. D. Incorrect. The UPDATE permission enables a principal to modify the data stored in an executable. |
50.
Which of the following Transact-SQL statements removes the INSERT permission from
the Person.Address table for the Sydney_Users role?
- A.GRANT INSERT ON [Person].[Address] to [Sydney_Users]
- B.GRANT SELECT ON [Person].[Address] to [Sydney_Users]
- C.DENY INSERT ON [Person].[Address] to [Sydney_Users]
- D.REVOKE INSERT ON [Person].[Address] to [Sydney_Users]
- Answer & Explanation
- Report
Answer : [D]
Explanation :
Explanation :
|
A. Incorrect. This statement grants the INSERT permission rather than revoking it. B. Incorrect. This statement grants the SELECT permission on the table. C. Incorrect. This statement applies the DENY INSERT permission rather than revoking the INSERT permission. D. Correct. This statement revokes the INSERT permission on the table. |
|
|
||||||||||||||||||||||||||||
