You have an Azure virtual machine based on a custom image named VM1.
VM1 hosts an instance of Microsoft SQL Server 2019 Standard.
You need to automate the maintenance of VM1 to meet the following requirements:
* Automate the patching of SQL Server and Windows Server.
* Automate full database backups and transaction log backups of the databases on VM1.
* Minimize administrative effort.
What should you do first?

• A.Enable a system-assigned managed identity for VM1
• B.Register VM1 to the Microsoft.Sql resource provider
• C.Install an Azure virtual machine Desired State Configuration (DSC) extension on VM1
• D.Register VM1 to the Microsoft.SqlVirtualMachine resource provider

Comment: *

Name: *

Email: *

Verification: *

You have an Azure SQL database.
Users report that the executions of a stored procedure are slower than usual. You suspect that a regressed query is causing the performance issue.
You need to view the query execution plan to verify whether a regressed query is causing the issue. The solution must minimize effort.
What should you use?

• A.Performance Recommendations in the Azure portal
• B.Extended Events in Microsoft SQL Server Management Studio (SSMS)
• C.Query Store in Microsoft SQL Server Management Studio (SSMS)
• D.Query Performance Insight in the Azure portal

Comment: *

Name: *

Email: *

Verification: *

You have a new Azure SQL database. The database contains a column that stores confidential information.
You need to track each time values from the column are returned in a query. The tracking information must be stored for 365 days from the date the query was executed.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.Turn on auditing and write audit logs to an Azure Storage account.
• B.Add extended properties to the column.
• C.Turn on Advanced Data Security for the Azure SQL server.
• D.Apply sensitivity labels named Highly Confidential to the column.
• E.Turn on Azure Advanced Threat Protection (ATP).

Correct Answer: A,C,D

Section: [none]
Explanation:
C: Advanced Data Security (ADS) is a unified package for advanced SQL security capabilities. ADS is available for Azure SQL Database, Azure SQL Managed Instance, and Azure Synapse Analytics. It includes functionality for discovering and classifying sensitive data D: You can apply sensitivity-classification labels persistently to columns by using new metadata attributes that have been added to the SQL Server database engine. This metadata can then be used for advanced, sensitivity-based auditing and protection scenarios.
A: An important aspect of the information-protection paradigm is the ability to monitor access to sensitive data.
Azure SQL Auditing has been enhanced to include a new field in the audit log called data_sensitivity_information. This field logs the sensitivity classifications (labels) of the data that was returned by a query. Here's an example:

Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/database/data-discovery-and-classification-overview

Comment: *

Name: *

Email: *

Verification: *

HOTSPOT
You have an Azure SQL database named DB1. The automatic tuning options for DB1 are configured as shown
in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Correct Answer:

Section: [none]
Explanation:
Box 1: Yes
We see: Tuning option: Create index ON
CREATE INDEX - Identifies indexes that may improve performance of your workload, creates indexes, and
automatically verifies that performance of queries has improved.
Box 2: No
Box 3: Yes
FORCE LAST GOOD PLAN (automatic plan correction) - Identifies Azure SQL queries using an execution plan
that is slower than the previous good plan, and queries using the last known good plan instead of the regressed
plan.

Comment: *

Name: *

Email: *

Verification: *

You have an on-premises app named App1 that stores data in an on-premises Microsoft SQL Server 2016 database named DB1.
You plan to deploy additional instances of App1 to separate Azure regions. Each region will have a separate instance of App1 and DB1. The separate instances of DB1 will sync by using Azure SQL Data Sync.
You need to recommend a database service for the deployment. The solution must minimize administrative effort.
What should you include in the recommendation?

• A.Azure SQL Managed instance
• B.Azure SQL Database single database
• C.Azure Database for PostgreSQL
• D.SQL Server on Azure virtual machines

Comment: *

Name: *

Email: *

Verification: *