nerdexam
Microsoft

70-473 · Question #115

Your environment contains several Microsoft Azure SQL databases. You need to prevent inbound connections from the Internet to the databases when CPU utilization exceeds 90 percent. Which two tasks sho

The correct answer is A. Create an Azure alert based on an event. D. Create a SQL Server Agent job.. To prevent inbound internet connections to Azure SQL databases when CPU utilization exceeds 90 percent, you need to set up an Azure alert to detect the condition and an automated job to modify network access rules.

Design and implement data security

Question

Your environment contains several Microsoft Azure SQL databases. You need to prevent inbound connections from the Internet to the databases when CPU utilization exceeds 90 percent. Which two tasks should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options

  • ACreate an Azure alert based on an event.
  • BCreate an Azure Data Factory pipeline.
  • CCreate an Azure metric alert.
  • DCreate a SQL Server Agent job.
  • EDeploy an Azure logic app.

How the community answered

(22 responses)
  • A
    55% (12)
  • B
    23% (5)
  • C
    9% (2)
  • E
    14% (3)

Why each option

To prevent inbound internet connections to Azure SQL databases when CPU utilization exceeds 90 percent, you need to set up an Azure alert to detect the condition and an automated job to modify network access rules.

ACreate an Azure alert based on an event.Correct

An Azure alert, specifically a metric alert for CPU utilization, is necessary to automatically detect when the database's CPU usage exceeds the 90 percent threshold, triggering a defined action.

BCreate an Azure Data Factory pipeline.

Azure Data Factory pipelines are designed for data movement and transformation, not for real-time monitoring and automated network security responses.

CCreate an Azure metric alert.

While an Azure metric alert is the specific type of alert needed, option A broadly covers the alerting mechanism, and D provides the complementary action component.

DCreate a SQL Server Agent job.Correct

For Azure SQL Managed Instances, a SQL Server Agent job can be configured to execute custom scripts, such as PowerShell, that interact with Azure management APIs to dynamically modify server-level firewall rules or Network Security Group settings, effectively blocking inbound internet connections.

EDeploy an Azure logic app.

An Azure Logic App is a valid automation tool that can be triggered by an Azure alert to modify firewall rules, but it is not one of the two selected correct answers for this specific solution.

Concept tested: Automated database access control based on metrics

Source: https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-overview

Topics

#Azure Monitor alerts#SQL Server Agent#connection security#resource governance

Community Discussion

No community discussion yet for this question.

Full 70-473 Practice