Unit 7
All of the following statements about application roles are true except for one. Which one?
Unlike a standard database role, an application role can contain only one member.
schema
collection of database objects
A user who's granted the REFERENCES object permission can do what?
create objects that refer to the object
Which statement do you use to transfer a database object from one schema to another?
ALTER SCHEMA
After you create a schema, you can create any object within that schema by
qualifying the object name with the schema name
The entities that can be secured on a server are called
securables
The highest level at which you can grant permissions is the ________________ level.
server
Where would you go to create, modify, or delete logins using the Management Studio?
the Security folder for the server
Which option can you use to make SQL Server prompt the user for a new password the first time the login ID is used?
MUST_CHANGE
Which statement is true about the DENY and REVOKE statements?
A denied permission can't be granted by role membership, but a revoked permission can
Each of the outcomes listed below is a result of executing the following script except for one. Which one? CREATE ROLE ExampleRole; ALTER ROLE db_datareader ADD MEMBER ExampleRole; GRANT INSERT,UPDATE ON Vendors TO ExampleRole; DENY INSERT ON Vendors TO ASmith; ALTER ROLE ExampleRole ADD MEMBER ASmith;
By being assigned to the role db_datareader, a user would be granted INSERT and UPDATE permission to the Vendors table and SELECT permission to all user tables.
Which of the following statements creates a SQL Server login ID for a user named TomBrown with the password 'abc123XYZ'.
CREATE LOGIN TomBrown WITH PASSWORD = 'abc123XYZ';
Which of the following statements creates a login ID for a Windows user named AliceJackson in a domain named Sales?
CREATE LOGIN [Sales\AliceJackson] FROM WINDOWS;
Which statement can you use to create a user-defined database role?
CREATE ROLE
Which of the following statements creates a database user in the current database from the SQL Server login ID for TomBrown?
CREATE USER TomBrown;
To log on to SQL Server using your SQL Server login ID, you use ________________ authentication.
SQL Server
To log on to SQL Server using your Windows login ID, you use ________________ authentication.
Windows
A user who's granted the EXECUTE object permission can execute what?
a stored procedure or function
You can use the GRANT statement to give users permission to use each of the following items except for one. Which one?
all the objects in a database
The users, groups, logins, and roles that have access to a server are called
principals
Before you can delete a user-defined server role, you must
delete all of its members
With the ALTER LOGIN statement, you can
enable or disable a login ID change the name for a login ID change the default database or language all of the above
Users who are involved in the administration of the server are typically assigned to one of the ________________ roles that are built into SQL Server.
fixed server
The dbcreator role
is intended for those users who need to be able to work with database objects lets members create, alter, and drop databases allows new members to be added to the role all of the above
To allow users to log on using either type of authentication, you need to set the SQL Server authentication to ________________ mode.
mixed
DDL
objects in a database