You work as the network database administrator at MiracleInfocom .com. The MiracleInfocom .com network consists of a single Active Directory domain named MiracleInfocom .com. All servers on the MiracleInfocom .com network run Windows Server 2003 and all client computers run Windows XP Professional. The MiracleInfocom .com network contains a Microsoft SQL Server 2005 database server named MiracleInfocom -DB01 which you administer. MiracleInfocom -DB01 is configured for Windows Authentication. You are busy configuring user access and permissions. Most of the MiracleInfocom .com users have the same access requirements at the server and database level but there are some exceptions. The MiracleInfocom .com network users will access the database through a custom application, stored procedures and ad hoc queries. A new MiracleInfocom .com security policy requires that access to the MiracleInfocom Data must be limited to Active Directory user accounts only. User accounts who are not members of the Domain Admins group are not configured as database administrators. You are required to configure user access to minimize the effort required to assign and audit user access permissions. What should you do?
A. Access permissions should be assigned to Active Directory groups.
B. Logins and database users should be created based on Active Directory user accounts.
C. Access permissions should be assigned based on application roles.
D. Access permissions should be assigned based on user accounts.
Answer:A
You work as the network database administrator at MiracleInfocom .com. The MiracleInfocom .com network consists of a single Active Directory domain named MiracleInfocom .com. All servers on the MiracleInfocom .com network run Windows Server 2003 and all client computers run Windows XP Professional. The MiracleInfocom .com network contains a Microsoft SQL Server 2005 database server named MiracleInfocom -DB01 which you administer. MiracleInfocom -DB01 is configured for Windows Authentication. You are busy configuring user access and permissions. Most of the MiracleInfocom .com users have the same access requirements at the server and database level but there are some exceptions. The MiracleInfocom .com network users will access the database through a custom application, stored procedures and ad hoc queries. A new MiracleInfocom .com security policy requires that access to the MiracleInfocom Data must be limited to Active Directory user accounts only. User accounts who are not members of the Domain Admins group are not configured as database administrators. You are required to configure user access to minimize the effort required to assign and audit user access permissions. What should you do?
A. Access permissions should be assigned to Active Directory groups. B. Logins and database users should be created based on Active Directory user accounts. C. Access permissions should be assigned based on application roles. D. Access permissions should be assigned based on user accounts.