Question 470
A team stores model API keys directly in a version-controlled SQL Database Project. What should the SQL developer do FIRST to address the specific issue?
Explanation
Correct Answer
Remove keys and use deployment-time secret references or supported managed identity. This targets the primary issue because repository history retains secrets even after a visible commit is removed. Verification: Secret scans pass and deployments resolve approved credentials securely. Prevent recurrence: Rotate any exposed keys and protect repository history.
Incorrect Answers
Identity permission at one Azure service does not imply access to adjacent resources.
DDM changes what unauthorized queries display; it is not data encryption.
Read filtering alone does not necessarily stop unauthorized DML that changes row ownership.