Implementing Azure Synapse Link for SQL Database
Short answer
AB Update the firewall rules to allow Azure services to access sql1. Enable the system-assigned managed identity.
Question
Key Takeaways
The exam tests the distinction between infrastructure connectivity (firewall) and identity enablement (managed identity) versus role assignment (IAM). A common trap is assigning high-privilege roles like Contributor when only identity enablement is needed for the feature to function.
This question tests the prerequisites for enabling Azure Synapse Link on Azure SQL Database, specifically network connectivity and identity management. The community consensus confirms that allowing Azure services via firewall rules and enabling the system-assigned managed identity are the required steps.
Common mistake: Many candidates choose AC, incorrectly believing they must assign the Contributor role to the workspace's managed identity. This is wrong because Synapse Link uses specific internal mechanisms and does not require the workspace to have full Contributor access to the SQL DB.
Expert Analysis
Why the Answer Is Correct
To implement Azure Synapse Link for Azure SQL Database, you must ensure the Synapse workspace can connect to the database and that the database supports the necessary identity-based authentication. Option A is correct because Azure Synapse Link requires the ability to connect to the SQL Database; thus, firewall rules must allow Azure services. Option B is correct because enabling the system-assigned managed identity on the SQL Database is a prerequisite for Synapse Link to authenticate and manage the replication process securely.
Why the Other Options Are Wrong
Option C is incorrect because assigning the Contributor role is excessive and not part of the standard implementation guide. Synapse Link handles permissions internally or uses specific roles if manual configuration is needed, but Contributor is not a prerequisite. Option D is incorrect because Transparent Data Encryption (TDE) should remain enabled for security; it does not prevent Synapse Link from functioning, provided the encryption keys are accessible.
Community Comment Notes
Comment [1] and [2] cite the official Microsoft Learn documentation, confirming options A and B as the correct actions. Comment [3] provides a detailed explanation of why firewall rules are necessary for connectivity. Comments [4] and [5] represent the common misconception regarding IAM roles, which the official guidance refutes by focusing on managed identity enablement rather than role assignment.
Official Reference
This link opens the official vendor documentation in a new tab.
Exam Strategy
Focus on the specific prerequisites listed in Microsoft Learn for each Azure service integration. Do not assume that 'more access' (like Contributor role) is better; often, enabling identities or adjusting network settings is sufficient and preferred.
Community Votes
71% of anonymous learners picked answer AB. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 6 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 6
-
9b71f40 👍 10I think the given answers are correct, Please refer the below link https://learn.microsoft.com/en-us/azure/synapse-analytics/synapse-link/connect-synapse-link-sql-database
-
ff5037f 👍 3AB ARE correct. for reference please check https://learn.microsoft.com/en-us/azure/synapse-analytics/synapse-link/connect-synapse-link-sql-database
-
babaksalarvand 👍 1To implement Azure Synapse Link for Azure SQL Database, you'll need to take the following actions on sql1: A. Update the firewall rules to allow Azure services to access sql1. This is necessary because Azure Synapse Link requires the Azure Synapse workspace to be able to connect to the Azure SQL Database. Updating the firewall rules ensures that Azure services can access sql1. B. Enable the system-assigned managed identity. This is important for security and authentication. The system-assigned managed identity allows Azure Synapse to authenticate to Azure SQL Database securely without needing to store credentials. So, the correct actions are A and B.
-
a85becd 👍 1To implement Azure Synapse Link for Azure SQL Database, you need to perform the following actions on sql1: Update the firewall rules to allow Azure services to access sql1. Assign the Contributor role to the system-assigned managed identity of workspace1 from the Access control (IAM) settings.
-
NAWRESS96 👍 1i think the answer is : A. Update the firewall rules to allow Azure services to access sql1. C. From the Access control (IAM) settings, assign the Contributor role to the system-assigned managed identity of workspace1.
Show 1 more comment
-
17lan 👍 2Agreed
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.