DP-300 · Question #239
Drag and Drop Question You have two instances of SQL Server on Azure Virtual Machines named VM1 and VM2. VM1 hosts a database named db1. You plan to create a database availability group (DAG) for…
The correct answer is From the master database, run CREATE MASTER KEY ENCRYPTION BY PASSWORD.; From the master database, run CREATE CERTIFICATE.; From the master database, run CREATE ENDPOINT. To configure certificate-based authentication for outbound connections on VM1, you must first create a Master Key in the master database to protect the certificate, then create the Certificate in the master database (not in db1) since endpoint authentication operates at the…
Question
Exhibit
Answer Area
Drag items
Correct arrangement
- From the master database, run CREATE MASTER KEY ENCRYPTION BY PASSWORD.
- From the master database, run CREATE CERTIFICATE.
- From the master database, run CREATE ENDPOINT.
Explanation
To configure certificate-based authentication for outbound connections on VM1, you must first create a Master Key in the master database to protect the certificate, then create the Certificate in the master database (not in db1) since endpoint authentication operates at the instance level using the master database, and finally create the Endpoint in the master database that references the certificate for the mirroring/AG connection. This sequence ensures the cryptographic infrastructure is in place before the endpoint is created and associated with the certificate.
Topics
Community Discussion
No community discussion yet for this question.