You administer a SQL 2012 server that contains a database named SalesDb.
SalesDb contains a schema named Customers that has a table named Regions.
A user named UserA is a member of a role named Sales.
UserA is granted the Select permission on the Regions table.
The Sales role is granted the Select permission on the Customers schema.
You need to remove the Select permission for UserA on the Regions table.
You also need to ensure that UserA can still accessall the tables in the Customers schema, including the
Regions table, through the Sales role permissions.
Which Transact-SQL statement should you use?
A.
DENY SELECT ON Object::Regions FROM UserA
B.
DENY SELECT ON Schema::Customers FROM UserA
C.
EXEC sp_addrolemember ‘Sales’, ‘UserA’
D.
REVOKE SELECT ON Object::Regions FROM UserA
E.
REVOKE SELECT ON Object::Regions FROM Sales
F.
EXEC sp_droproiemember ‘Sales’, ‘UserA’
G.
REVOKE SELECT ON Schema::Customers FROM UserA
H.
DENY SELECT ON Object::Regions FROM Sales
I.
DENY SELECT ON Schema::Customers FROM Sales
J.
REVOKE SELECT ON Schema::Customers FROM Sales
Explanation:
http://msdn.microsoft.com/en-us/library/ms188369.aspx
http://msdn.microsoft.com/en-us/library/ms187750.aspx
http://msdn.microsoft.com/en-us/library/ff848791.aspx
UserA previously GRANTED ‘Select’ permission on object REGIONS
To remove this permission form UserA, you use:
REVOKE SELECT ON Object::Regions FROM UserA
In order for UserA to still be able to access the REGIONS table through his role-based permission (being part of the ‘Sales’ role), you cannot issue a DENY SELECT ON