nerdexam
Microsoft

70-473 · Question #107

Your company has an application that uses several Microsoft Azure SQL databases. New databases are added regularly as customers sign up for new services. Databases are removed regularly as customers…

The correct answer is C. Set-AzureRmSqIServerAuditingPolicy. To ensure all Azure SQL databases, including new ones, are constantly audited, you must configure a server-level auditing policy.

Design and implement data security

Question

Your company has an application that uses several Microsoft Azure SQL databases. New databases are added regularly as customers sign up for new services. Databases are removed regularly as customers cancel the services. You create an auditing policy. You plan to configure auditing for all of the databases. You need to ensure that all of the databases are audited constantly. Which cmdlet should you use?

Options

  • ASet-AzureRmSqIDatabaseAuditingPolicy
  • BUse-AzureRmSqlServerAuditingPolicy
  • CSet-AzureRmSqIServerAuditingPolicy
  • DNew-AzureRmOperationallnsightsAzureAuditDataSource

How the community answered

(65 responses)
  • A
    5% (3)
  • B
    3% (2)
  • C
    85% (55)
  • D
    8% (5)

Why each option

To ensure all Azure SQL databases, including new ones, are constantly audited, you must configure a server-level auditing policy.

ASet-AzureRmSqIDatabaseAuditingPolicy

Set-AzureRmSqlDatabaseAuditingPolicy configures auditing for a specific Azure SQL database, requiring manual configuration for each new database and failing to meet the requirement for automatically auditing all databases.

BUse-AzureRmSqlServerAuditingPolicy

Use-AzureRmSqlServerAuditingPolicy is not a valid PowerShell cmdlet for managing Azure SQL Server auditing policies.

CSet-AzureRmSqIServerAuditingPolicyCorrect

The Set-AzureRmSqlServerAuditingPolicy cmdlet configures the auditing policy for an entire Azure SQL logical server. When auditing is enabled at the server level, all existing and newly created databases on that server automatically inherit and apply the auditing policy, ensuring that auditing is constant and covers all databases, including those added regularly.

DNew-AzureRmOperationallnsightsAzureAuditDataSource

New-AzureRmOperationalInsightsAzureAuditDataSource is used to create a new Log Analytics data source for Azure SQL Audit data, configuring where audit logs are sent, not the auditing policy itself.

Concept tested: Azure SQL Database server-level auditing

Source: https://learn.microsoft.com/en-us/powershell/module/az.sql/set-azsqlserverauditingpolicy?view=azps-11.4.0

Topics

#Azure SQL DB auditing#server-level auditing#PowerShell#compliance

Community Discussion

No community discussion yet for this question.

Full 70-473 Practice