You have an Azure SQL database. The database contains a table that uses a columnstore index and is accessed infrequently.
You enable columnstore archival compression.
What are two possible results of the configuration? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

• A.Queries that use the index will consume more disk I/O.
• B.Queries that use the index will retrieve fewer data pages.
• C.The index will consume more disk space.
• D.The index will consume more memory.
• E.Queries that use the index will consume more CPU resources.

Comment: *

Name: *

Email: *

Verification: *

You have a new Azure SQL database. The database contains a column that stores confidential information.
You need to track each time values from the column are returned in a query. The tracking information must be stored for 365 days from the date the query was executed.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.Turn on auditing and write audit logs to an Azure Storage account.
• B.Add extended properties to the column.
• C.Turn on Advanced Data Security for the Azure SQL server.
• D.Apply sensitivity labels named Highly Confidential to the column.
• E.Turn on Azure Advanced Threat Protection (ATP).

Correct Answer: A,C,D

C: Advanced Data Security (ADS) is a unified package for advanced SQL security capabilities. ADS is available for Azure SQL Database, Azure SQL Managed Instance, and Azure Synapse Analytics. It includes functionality for discovering and classifying sensitive data D: You can apply sensitivity-classification labels persistently to columns by using new metadata attributes that have been added to the SQL Server database engine. This metadata can then be used for advanced, sensitivity-based auditing and protection scenarios.
A: An important aspect of the information-protection paradigm is the ability to monitor access to sensitive data.
Azure SQL Auditing has been enhanced to include a new field in the audit log called data_sensitivity_information. This field logs the sensitivity classifications (labels) of the data that was returned by a query. Here's an example:

Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/database/data-discovery-and-classification-overview

Comment: *

Name: *

Email: *

Verification: *

You have an Azure virtual machine named VM1 on a virtual network named VNet1. Outbound traffic from VM1 to the internet is blocked.
You have an Azure SQL database named SqlDb1 on a logical server named SqlSrv1.
You need to implement connectivity between VM1 and SqlDb1 to meet the following requirements:
Ensure that all traffic to the public endpoint of SqlSrv1 is blocked.
Minimize the possibility of VM1 exfiltrating data stored in SqlDb1.
D18912E1457D5D1DDCBD40AB3BF70D5D
What should you create on VNet1?

• A.a VPN gateway
• B.a service endpoint
• C.a private link
• D.an ExpressRoute gateway

Comment: *

Name: *

Email: *

Verification: *

DRAG DROP
You need to apply 20 built-in Azure Policy definitions to all new and existing Azure SQL Database deployments in an Azure subscription. The solution must minimize administrative effort.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Correct Answer:

Section: [none]
Explanation:
Step 1: Create an Azure Policy Initiative
The first step in enforcing compliance with Azure Policy is to assign a policy definition. A policy definition defines under what condition a policy is enforced and what effect to take.
With an initiative definition, you can group several policy definitions to achieve one overarching goal. An initiative evaluates resources within scope of the assignment for compliance to the included policies.
Step 2: Create an Azure Policy Initiative assignment
Assign the initiative definition you created in the previous step.
Step 3: Run Azure Policy remediation tasks
To apply the Policy Initiative to the existing SQL databases.
Reference:
https://docs.microsoft.com/en-us/azure/governance/policy/tutorials/create-and-manage

Comment: *

Name: *

Email: *

Verification: *

You have an on-premises app named App1 that stores data in an on-premises Microsoft SQL Server 2016
database named DB1.
You plan to deploy additional instances of App1 to separate Azure regions. Each region will have a separate
instance of App1 and DB1. The separate instances of DB1 will sync by using Azure SQL Data Sync.
You need to recommend a database service for the deployment. The solution must minimize administrative
effort.
What should you include in the recommendation?

• A.Azure SQL Managed instance
• B.Azure SQL Database single database
• C.Azure Database for PostgreSQL
• D.SQL Server on Azure virtual machines

Comment: *

Name: *

Email: *

Verification: *