Hotspot Question
You have an Azure subscription that contains a logical SQL server. The server hosts two databases named db1 and db2 and an Azure AD service principal named app1.
You need to ensure that app1 can access db1. The solution must use the principle of least privilege.
How should you complete the Transact-SQL statement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
"Create the service principal user in Azure SQL Database - Create the user AppSP in the SQL Database using the following T-SQL command:
CREATE USER [AppSP] FROM EXTERNAL PROVIDER
GO
"
Logical server is a default container for Azure SQL Database.
https://learn.microsoft.com/en-us/azure/azure-sql/database/authentication-aad-service-principal-tutorial?view=azuresql