STIGQter: STIG Summary: Microsoft Azure SQL Database Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 02 Jul 2025:

Azure SQL Database default demonstration and sample databases, database objects, and applications must be removed.

DISA Rule

SV-255333r960963_rule

Vulnerability Number

V-255333

Group Title

SRG-APP-000141-DB-000090

Rule Version

ASQL-00-006900

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Remove any demonstration and sample databases, database applications, objects, and files from the Azure SQL Database.

Drop Database Syntax: https://docs.microsoft.com/en-us/sql/t-sql/statements/drop-database-transact-sql?view=azuresqldb-current

Check Contents

Review vendor documentation and vendor websites to identify vendor-provided demonstration or sample databases, database applications, objects, and files.

Review the Azure SQL Database to determine if any of the demonstration and sample databases, database applications, or files are installed in the database or are included with the Azure SQL Database.

If any are present in the database or are included with the Azure SQL Database, this is a finding.

Vulnerability Number

V-255333

Documentable

False

Rule Version

ASQL-00-006900

Severity Override Guidance

Review vendor documentation and vendor websites to identify vendor-provided demonstration or sample databases, database applications, objects, and files.

Review the Azure SQL Database to determine if any of the demonstration and sample databases, database applications, or files are installed in the database or are included with the Azure SQL Database.

If any are present in the database or are included with the Azure SQL Database, this is a finding.

Check Content Reference

M

Target Key

5500