Basic Concept: This question tests identity and authentication for Azure SQL and SQL Server workloads, including when to use contained users, directory identities, certificate validation, or authentication profiles.
Why A and C is Correct: Active Directory or Microsoft Entra integration centralizes identity and group membership so database access can be managed through directory accounts. In this scenario, the important constraint is: You need to create the required Automation accounts. From the Azure Active Directory admin center, create a service principal. satisfies that constraint without adding an unrelated service or manual process. On SQL1. create a SQL user in the databases. matches the expected DP-300 administration action.
On SQL1. create a SQL user in the databases. is a security-related control, but its value depends on whether the requirement is identity, encryption, auditing, network isolation, or data exposure reduction. The question is not asking for a general Azure capability; it is asking for the feature that produces this result: You need to create the required Automation accounts.
Why B is Wrong: A managed identity gives an Azure resource an identity in Microsoft Entra ID so it can access services such as Key Vault without embedding credentials in code. It is not the right enforcement point for this case; the scenario needs the control that governs the data or identity path being tested.
Why D is Wrong: On SQL1, create a SQL login. is a security-related control, but its value depends on whether the requirement is identity, encryption, auditing, network isolation, or data exposure reduction. It protects or manages a different security layer, so the required database access or protection behavior would still be incomplete.
Why E is Wrong: Active Directory or Microsoft Entra integration centralizes identity and group membership so database access can be managed through directory accounts. It is not the right enforcement point for this case; the scenario needs the control that governs the data or identity path being tested.