nerdexam
Microsoft

70-465 · Question #74

You need to recommend a solution to ensure that USP_4 adheres to the security requirements. What should you include in the recommendation?

The correct answer is A. Enable SQL Server Audit.. To meet security auditing requirements for a stored procedure, SQL Server Audit provides the native, policy-based mechanism for tracking and logging database activity.

Submitted by kev92· Mar 5, 2026Design database security solutions

Question

You need to recommend a solution to ensure that USP_4 adheres to the security requirements. What should you include in the recommendation?

Options

  • AEnable SQL Server Audit.
  • BEnable trace flags.
  • CConfigure data manipulation language (DML) triggers.
  • DEnable C2 audit tracing.

How the community answered

(36 responses)
  • A
    78% (28)
  • B
    8% (3)
  • C
    3% (1)
  • D
    11% (4)

Why each option

To meet security auditing requirements for a stored procedure, SQL Server Audit provides the native, policy-based mechanism for tracking and logging database activity.

AEnable SQL Server Audit.Correct

SQL Server Audit allows administrators to create audit specifications that track server- and database-level events, including the execution of stored procedures and DML operations, writing results to the Windows Event Log, Security Log, or a file. This satisfies compliance and security requirements by providing a tamper-resistant, structured audit trail that can be reviewed and reported on without impacting application logic.

BEnable trace flags.

Trace flags are used to alter SQL Server engine behavior or enable diagnostic features globally, not to capture or log security-relevant user activity for auditing purposes.

CConfigure data manipulation language (DML) triggers.

DML triggers fire in response to INSERT, UPDATE, or DELETE statements and can enforce business logic, but they are not a security auditing mechanism and do not provide a reliable, tamper-resistant audit trail as required by security policies.

DEnable C2 audit tracing.

C2 audit tracing is a deprecated feature that logs all database activity to a file but is not recommended for modern SQL Server deployments because it can fill the disk and halt the server; SQL Server Audit is the supported replacement.

Concept tested: SQL Server Audit for stored procedure security compliance

Source: https://learn.microsoft.com/en-us/sql/relational-databases/security/auditing/sql-server-audit-database-engine

Topics

#SQL Server security#Auditing#SQL Server Audit

Community Discussion

No community discussion yet for this question.

Full 70-465 Practice