STIGQter: STIG Summary: Microsoft Azure SQL Managed Instance Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 23 Sep 2025:

Azure SQL Managed Instance default demonstration and sample databases, database objects, and applications must be removed.

DISA Rule

SV-276244r1149641_rule

Vulnerability Number

V-276244

Group Title

SRG-APP-000141-DB-000090

Rule Version

MSQL-00-006900

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Remove any demonstration and sample databases, database applications, objects, and files from the Azure SQL Managed Instance.

Drop Database Syntax: https://learn.microsoft.com/en-us/sql/t-sql/statements/drop-database-transact-sql?view=azuresqldb-mi-current

Check Contents

Review vendor documentation and vendor websites to identify vendor-provided demonstration or sample databases, database applications, objects, and files.

Review the Azure SQL Managed Instance to determine if any of the demonstration and sample databases, database applications, or files are installed in the database or are included with the Azure SQL Managed Instance.

Run the following query to check for names matching known sample databases. Sample databases may have been renamed, so this is not an exhaustive list.

SELECT name
FROM sys.databases
WHERE name LIKE '%pubs%'
OR name LIKE '%northwind%'
OR name LIKE '%adventureworks%'
OR name LIKE '%wideworldimporters%'
OR name LIKE '%contoso%'

If any sample databases are found, this is a finding.

Vulnerability Number

V-276244

Documentable

False

Rule Version

MSQL-00-006900

Severity Override Guidance

Review vendor documentation and vendor websites to identify vendor-provided demonstration or sample databases, database applications, objects, and files.

Review the Azure SQL Managed Instance to determine if any of the demonstration and sample databases, database applications, or files are installed in the database or are included with the Azure SQL Managed Instance.

Run the following query to check for names matching known sample databases. Sample databases may have been renamed, so this is not an exhaustive list.

SELECT name
FROM sys.databases
WHERE name LIKE '%pubs%'
OR name LIKE '%northwind%'
OR name LIKE '%adventureworks%'
OR name LIKE '%wideworldimporters%'
OR name LIKE '%contoso%'

If any sample databases are found, this is a finding.

Check Content Reference

M

Target Key

5711