70-465 · Question #74
You need to recommend a solution to ensure that USP_4 adheres to the security requirements. What should you include in the recommendation?
The correct answer is A. Enable SQL Server Audit.. To meet security auditing requirements for a stored procedure, SQL Server Audit provides the native, policy-based mechanism for tracking and logging database activity.
Question
Options
- AEnable SQL Server Audit.
- BEnable trace flags.
- CConfigure data manipulation language (DML) triggers.
- DEnable C2 audit tracing.
How the community answered
(36 responses)- A78% (28)
- B8% (3)
- C3% (1)
- D11% (4)
Why each option
To meet security auditing requirements for a stored procedure, SQL Server Audit provides the native, policy-based mechanism for tracking and logging database activity.
SQL Server Audit allows administrators to create audit specifications that track server- and database-level events, including the execution of stored procedures and DML operations, writing results to the Windows Event Log, Security Log, or a file. This satisfies compliance and security requirements by providing a tamper-resistant, structured audit trail that can be reviewed and reported on without impacting application logic.
Trace flags are used to alter SQL Server engine behavior or enable diagnostic features globally, not to capture or log security-relevant user activity for auditing purposes.
DML triggers fire in response to INSERT, UPDATE, or DELETE statements and can enforce business logic, but they are not a security auditing mechanism and do not provide a reliable, tamper-resistant audit trail as required by security policies.
C2 audit tracing is a deprecated feature that logs all database activity to a file but is not recommended for modern SQL Server deployments because it can fill the disk and halt the server; SQL Server Audit is the supported replacement.
Concept tested: SQL Server Audit for stored procedure security compliance
Source: https://learn.microsoft.com/en-us/sql/relational-databases/security/auditing/sql-server-audit-database-engine
Topics
Community Discussion
No community discussion yet for this question.