70-450 · Question #14
You administer a SQL Server 2008 infrastructure. Developers in your company have rights to author policies. A test server is used to develop and test the policies. The Policy-Based Management…
The correct answer is B. Grant the ALTER TRACE permission to the developers. Additional Considerations About Alerts Be aware of the following additional considerations about alerts: - Alerts are raised only for policies that are enabled. Because On demand policies cannot be enabled, alerts are not raised for policies that are executed on demand. - If…
Question
You administer a SQL Server 2008 infrastructure. Developers in your company have rights to author policies. A test server is used to develop and test the policies. The Policy-Based Management feature generates SQL Server Agent alerts when a policy is violated. The developers are able to create and modify policies, but are unable to test policy violation alerts. You need to grant the necessary permission to the developers to test the policies. You also need to comply with the least privilege principle when you grant the permission. What should you do?
Options
- AAdd the developers to the sysadmin server role.
- BGrant the ALTER TRACE permission to the developers.
- CAdd the developers to the PolicyAdministratorRole role in the MSDB database.
- DGrant the EXECUTE permission on the sys.sp_syspolicy_execute_policy stored procedure
How the community answered
(26 responses)- A4% (1)
- B73% (19)
- C8% (2)
- D15% (4)
Explanation
Additional Considerations About Alerts Be aware of the following additional considerations about alerts: - Alerts are raised only for policies that are enabled. Because On demand policies cannot be enabled, alerts are not raised for policies that are executed on demand. - If the action you want to take includes sending an e-mail message, you must configure a mail account. We recommend that you use Database Mail. For more information about how to set up Database Mail, see How to: Create Database Mail Accounts (Transact-SQL). - Alert security: When policies are evaluated on demand, they execute in the security context of the user. To write to the error log, the user must have ALTER TRACE permissions or be a member of the sysadmin fixed server role. Policies that are evaluated by a user that has less privileges will not write to the event log, and will not fire an alert. The automated execution modes execute as a member of the sysadmin role. This allows the policy to write to the error log and raise an alert.
Topics
Community Discussion
No community discussion yet for this question.