Practice question 64 of 498 · medium
A workload is compliant with every assigned Azure Policy rule, but a service identity cannot query its database. What should the architect explain?
Choose the single best answer.
Show the answer and explanation
✓ Correct answer
- Configuration compliance does not grant database authorization; assign the required supported data-access permissions
Configuration compliance does not grant database authorization; assign the required supported data-access permissions: Policy and access authorization serve different purposes. Policy compliance should automatically grant all data-plane rights: It does not establish a principal entitlement to query data. Disable database authentication because Policy is already green: This removes a necessary control. Apply an extra audit policy to grant SQL query rights: Audit assesses configuration rather than granting query permissions.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.