Question
You have an Azure SQL Database logical server named Server1 that contains a database named DB1.
You need to configure authentication for Server1 to meet the following requirements:
SQL authentication cannot be used for any databases on Server1.
The solution must be enforced centrally at the server level.
What should you do?
- A. Configure a Microsoft Entra administrator for Server1.
- B. Enable a managed identity for Server1.
- C. Enable Microsoft Entra-only authentication for Server1. Correct
- D. Remove SQL logins from DB1.
Explanation
Enabling Microsoft Entra-only authentication disables SQL authentication at the server level, so no SQL authentication account can connect to the logical server or any of its databases. Configuring a Microsoft Entra administrator is a prerequisite for this feature, but on its own it leaves SQL authentication working. A managed identity gives the server an identity for outbound access and does not affect how clients sign in. Removing logins from DB1 is not central enforcement, because it affects only that database and new SQL logins could still be created and used.
