70-465 · Question #82
You need to ensure that the account used to generate reports can only connect during certain hours. What should you configure?
The correct answer is C. Logon Triggers. To ensure a database account can only connect during specified hours, a logon trigger should be configured.
Question
Options
- AA CHECK constraint.
- BWindows Server Resource Manager (WSRM).
- CLogon Triggers.
- DLogin Auditing.
How the community answered
(18 responses)- A6% (1)
- B11% (2)
- C83% (15)
Why each option
To ensure a database account can only connect during specified hours, a logon trigger should be configured.
A CHECK constraint is used to enforce data integrity by limiting the values that can be entered into a column within a database table, not to control connection times for user accounts.
Windows Server Resource Manager (WSRM) is used to manage and allocate server resources (CPU, memory, etc.) to applications and users, but it does not control when a database login can occur.
Logon triggers are special DDL triggers that fire in response to a LOGON event, allowing an administrator to intercept and control the login process. By implementing logic within a logon trigger that checks the current time against predefined allowed hours for a specific login, the connection can be programmatically rolled back and prevented if the login attempt occurs outside the permitted timeframe.
Login Auditing records successful and failed login attempts for monitoring and security analysis, but it does not prevent or restrict logins based on time criteria.
Concept tested: Enforcing database login time restrictions
Source: https://learn.microsoft.com/en-us/sql/relational-databases/triggers/ddl-triggers?view=sql-server-ver16#LogonTriggers
Topics
Community Discussion
No community discussion yet for this question.