Question 620
A developer assumes a SQL firewall rule alone authenticates callers to Azure SQL. Which test result BEST demonstrates that the intended solution is working?
Explanation
Correct Answer
An unapproved identity is denied even from an allowed network. This is the decisive observable evidence after implementing require encrypted transport and a verified principal alongside network access restrictions. It tests the underlying requirement: Network allowlisting does not establish user identity or object authorization.
Incorrect Answers
The worker connects with an approved identity and no stored SQL password. However, that result would not establish the required outcome: an unapproved identity is denied even from an allowed network.
Authorized clients read/write after rotation and revoked keys no longer work. However, that result would not establish the required outcome: an unapproved identity is denied even from an allowed network.
Supported equality or enclave test cases behave as designed without broad plaintext exposure. However, that result would not establish the required outcome: an unapproved identity is denied even from an allowed network.