nerdexam
Microsoft

70-450 · Question #51

You are configuring a new SQL Server installation. The SQL Server instance will be used for both online analytical processing (OLAP) and relational data. The data in the server is accessed…

The correct answer is D. Create three different non-administrative local user accounts and assign them to each of the. Answer is D. FromMicrosoft'sbestpracticespoint of view every service should have it's own service account. but is not recommended as bestpractice. You can assign the same login account to all SQL Server services, or you can configure each service account individually. You can…

Design an optimized database solution

Question

You are configuring a new SQL Server installation. The SQL Server instance will be used for both online analytical processing (OLAP) and relational data. The data in the server is accessed frequently. You can configure the services, startup type, and accounts used by the services that run on the server according to the following table:

You want to raise the level of security on the server. You need to minimize the surface area for potential attacks on the server. What should you do? (More than one answer choice may achieve the goal. Select the BEST answer.)

Options

  • AChange the Startup type property for all the services to Manual.
  • BChange the Startup type property for all the services to Disabled.
  • CIs a correct answer you can select this option due the installation of an SQL 2008 instance
  • DCreate three different non-administrative local user accounts and assign them to each of the

How the community answered

(53 responses)
  • A
    4% (2)
  • B
    11% (6)
  • C
    6% (3)
  • D
    79% (42)

Explanation

Answer is D. FromMicrosoft'sbestpracticespoint of view every service should have it's own service account. but is not recommended as bestpractice. You can assign the same login account to all SQL Server services, or you can configure each service account individually. You can also specify whether services start automatically, are started manually, or are disabled. Microsoft recommends that you configure service accounts individually to provide least privileges for each service, where SQL Server services are granted the minimum permissions they need to complete their tasks. For more information

Topics

#surface area configuration#service accounts#least privilege#attack surface

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 70-450 Practice