You use a contained database named ContosoDb within a domain.
You need to create a user who can log on to the ContosoDb database. You also need to
ensure that you can port the database to different database servers within the domain
without additional user account configurations.
Which type of user should you create?
A.
User mapped to a certificate
B.
SQL user without login
C.
Domain user
D.
SQL user with login
I have a big problem with this one… Contained Database means that we can use SQL Users without Login.
User will be contained in the db, and will be available on the second server.
If we use a Domain user, we will need to recreate the Login on the second server. (Logins are stored in the master db)
For me, good answer should be B…
Well… I’m confused with “SQL User without Login” and “SQL User with password”… My preceding remark is false…
Someone could explain me how to create a “Domain User”? Doesn’t seem to exist for me.
This question is really disturbing for me.
Of these options provided Answer “C” seems correct.
The question requires the user to be able to login to the database. This is the key to answer.
“A” is incorrect as the users mapped to a certificates cannot log on to the database.
So is “B”; the user needs to be able to log on to the database.
“D” is incorrect because it violates the purpose of contained databases. If a user is created with login then it will have to rely on master database.
Yes, you can have domain users in the contained databases. When you create a domain user in a contained database, it will not create an entry in master database. If you create one and then log in using an SA account, you will not see that login in the instance level security.
Here is an explanation from BOL, “Authorized Windows users and members of authorized Windows groups can connect directly to the database and do not need logins in the master database. The database trusts the authentication by Windows.”
If distractor B had been “SQL user with password” then this would have been a better answer. “Domain user” is the correct response.
Option C is correct one.