Question 320
At Granite SaaS, the tenant database platform team maintains a multi-tenant business application backed by Azure SQL with requirements for tenant isolation and consistent provisioning. After a claimed fix, the release reviewer evaluates: An Azure SQL Database watcher account has excessive permissions because an initial deployment granted full database ownership for simple monitoring. Which observed result BEST proves the intended problem is corrected?
Explanation
Correct Answer
The collector still receives required operational observations but a test unauthorized DDL operation by that identity is denied. That observable result supports resolution of: An Azure SQL Database watcher account has excessive permissions because an initial deployment granted full database ownership for simple monitoring. The corresponding corrective change is: Use the minimum supported monitoring permissions and separate observability identities from database administration roles. The Granite SaaS reviewer can distinguish demonstrated database behavior from an untested change claim.
Incorrect Answers
A targeted storage or workload change reduces the log-write bottleneck and transaction commit delays in a controlled comparison. That result is evidence for another corrective change: Interpret transaction log I/O and resource governance metrics alongside CPU, data I/O and workload latency before choosing remediation. The alternative problem is: A SQL database reaches high transaction log write utilization but operations increases CPU blindly because it reads only total DTU or vCore usage. The current Granite SaaS issue is instead: An Azure SQL Database watcher account has excessive permissions because an initial deployment granted full database ownership for simple monitoring. Its decisive acceptance evidence would be: The collector still receives required operational observations but a test unauthorized DDL operation by that identity is denied.
A controlled deadlock produces an analysable event file while ordinary Query Store query metrics remain unaffected. That result is evidence for another corrective change: Use an appropriately scoped Extended Events session to capture the needed deadlock or engine diagnostic information safely. The alternative problem is: An operations team assumes Query Store replaces every server-wide Extended Events diagnostic needed for deadlock investigation. The current Granite SaaS issue is instead: An Azure SQL Database watcher account has excessive permissions because an initial deployment granted full database ownership for simple monitoring. Its decisive acceptance evidence would be: The collector still receives required operational observations but a test unauthorized DDL operation by that identity is denied.
The alert remains quiet during known healthy load and fires for a representative sustained blocking or I/O regression. That result is evidence for another corrective change: Define wait-category baselines and threshold rules tied to sustained workload impact rather than raw existence of wait time. The alternative problem is: A monitoring rule alerts on every nonzero wait statistic value and sends constant false alarms even during normal SQL operations. The current Granite SaaS issue is instead: An Azure SQL Database watcher account has excessive permissions because an initial deployment granted full database ownership for simple monitoring. Its decisive acceptance evidence would be: The collector still receives required operational observations but a test unauthorized DDL operation by that identity is denied.