nerdexam
Microsoft

70-450 · Question #14

You administer a SQL Server 2008 infrastructure. Developers in your company have rights to author policies. A test server is used to develop and test the policies. The Policy-Based Management…

The correct answer is B. Grant the ALTER TRACE permission to the developers. Additional Considerations About Alerts Be aware of the following additional considerations about alerts: - Alerts are raised only for policies that are enabled. Because On demand policies cannot be enabled, alerts are not raised for policies that are executed on demand. - If…

Design and implement an optimized monitoring strategy

Question

You administer a SQL Server 2008 infrastructure. Developers in your company have rights to author policies. A test server is used to develop and test the policies. The Policy-Based Management feature generates SQL Server Agent alerts when a policy is violated. The developers are able to create and modify policies, but are unable to test policy violation alerts. You need to grant the necessary permission to the developers to test the policies. You also need to comply with the least privilege principle when you grant the permission. What should you do?

Options

  • AAdd the developers to the sysadmin server role.
  • BGrant the ALTER TRACE permission to the developers.
  • CAdd the developers to the PolicyAdministratorRole role in the MSDB database.
  • DGrant the EXECUTE permission on the sys.sp_syspolicy_execute_policy stored procedure

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    73% (19)
  • C
    8% (2)
  • D
    15% (4)

Explanation

Additional Considerations About Alerts Be aware of the following additional considerations about alerts: - Alerts are raised only for policies that are enabled. Because On demand policies cannot be enabled, alerts are not raised for policies that are executed on demand. - If the action you want to take includes sending an e-mail message, you must configure a mail account. We recommend that you use Database Mail. For more information about how to set up Database Mail, see How to: Create Database Mail Accounts (Transact-SQL). - Alert security: When policies are evaluated on demand, they execute in the security context of the user. To write to the error log, the user must have ALTER TRACE permissions or be a member of the sysadmin fixed server role. Policies that are evaluated by a user that has less privileges will not write to the event log, and will not fire an alert. The automated execution modes execute as a member of the sysadmin role. This allows the policy to write to the error log and raise an alert.

Topics

#Policy-Based Management#ALTER TRACE permission#least privilege#SQL Server Agent alerts

Community Discussion

No community discussion yet for this question.

Full 70-450 Practice