Question 120
A developer assumes a SQL firewall rule alone authenticates callers to Azure SQL. Which ongoing control is MOST relevant after the issue is fixed?
Explanation
Correct Answer
Keep firewall, identity and database grants under independent review. This guards against recurrence because network allowlisting does not establish user identity or object authorization. The direct remediation is: Require encrypted transport and a verified principal alongside network access restrictions.
Incorrect Answers
Scope identity permissions and review token failures. The current task instead requires this action: keep firewall, identity and database grants under independent review.
Verify exports and application caches do not persist unmasked values.
Audit schema role memberships after every release. The current task instead requires this action: keep firewall, identity and database grants under independent review.