Question 130
A deployment job has Contributor on an Azure resource group but fails its SQL table modifications because no database principal was granted access. Which observable result BEST proves the database administration requirement is satisfied?
Explanation
Correct Answer
The automation updates only intended database resources and produces repeatable audit evidence of changes and failures without storing plaintext passwords. This is the observable database and application outcome rather than merely a saved setting. Azure RBAC permissions to create an Azure SQL server do not imply arbitrary T-SQL data access to every user database.
Incorrect Answers
Scheduled maintenance produces validated database results and on-call teams receive accurate failure notifications with safe recovery playbooks. This would validate Azure database task automation alerts and retries, but it does not establish the required outcome here. Verify instead: The automation updates only intended database resources and produces repeatable audit evidence of changes and failures without storing plaintext passwords.
Repeatable deployments create the intended SQL resources in each subscription without silently broadening public network access or replacing production data. This would validate ARM and Bicep declarative Azure SQL provisioning, but it does not establish the required outcome here. Verify instead: The automation updates only intended database resources and produces repeatable audit evidence of changes and failures without storing plaintext passwords.
The maintenance job executes on the approved cadence with least-privilege identity and traceable execution logs without depending on a personal admin login. This would validate SQL Server Agent schedules and job ownership, but it does not establish the required outcome here. Verify instead: The automation updates only intended database resources and produces repeatable audit evidence of changes and failures without storing plaintext passwords.


