You have a new Azure SQL database. The database contains a column that stores confidential information.
You need to track each time values from the column are returned in a query. The tracking information must be
stored for 365 days from the date the query was executed.
Which three actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

• A.Turn on auditing and write audit logs to an Azure Storage account.
• B.Add extended properties to the column.
• C.Turn on Advanced Data Security for the Azure SQL server.
• D.Apply sensitivity labels named Highly Confidential to the column.
• E.Turn on Azure Advanced Threat Protection (ATP).

Correct Answer: A,C,D

Section: [none]
Explanation:
C: Advanced Data Security (ADS) is a unified package for advanced SQL security capabilities. ADS is available
for Azure SQL Database, Azure SQL Managed Instance, and Azure Synapse Analytics. It includes functionality
for discovering and classifying sensitive data
D: You can apply sensitivity-classification labels persistently to columns by using new metadata attributes that
have been added to the SQL Server database engine. This metadata can then be used for advanced,
sensitivity-based auditing and protection scenarios.
A: An important aspect of the information-protection paradigm is the ability to monitor access to sensitive data.
Azure SQL Auditing has been enhanced to include a new field in the audit log called
data_sensitivity_information. This field logs the sensitivity classifications (labels) of the data that was returned
by a query. Here's an example:

Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/database/data-discovery-and-classification-overview

Comment: *

Name: *

Email: *

Verification: *

You have SQL Server on an Azure virtual machine named SQL1.
SQL1 has an agent job to back up all databases.
You add a user named dbadmin1 as a SQL Server Agent operator.
You need to ensure that dbadmin1 receives an email alert if a job fails.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

Explanation:
Step 1: Enable the email settings for the SQL Server Agent.
To send a notification in response to an alert, you must first configure SQL Server Agent to send mail.
Step 2: Create a job alert
Step 3: Create a job notification
Example:
-- adds an e-mail notification for the specified alert (Test Alert)
-- This example assumes that Test Alert already exists
-- and that Francois Ajenstat is a valid operator name.
USE msdb ;
GO
EXEC dbo.sp_add_notification
@alert_name = N'Test Alert',
@operator_name = N'Francois Ajenstat',
@notification_method = 1 ;
GO
Reference:
https://docs.microsoft.com/en-us/sql/ssms/agent/notify-an-operator-of-job-status
https://docs.microsoft.com/en-us/sql/ssms/agent/assign-alerts-to-an-operator

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft SQL Server 2019 instance in an on-premises datacenter. The instance contains a 4-TB database named DB1.
You plan to migrate DB1 to an Azure SQL Database managed instance.
What should you use to minimize downtime and data loss during the migration?

• A.distributed availability groups
• B.database mirroring
• C.log shipping
• D.Database Migration Assistant

Comment: *

Name: *

Email: *

Verification: *

You need to trigger an Azure Data Factory pipeline when a file arrives in an Azure Data Lake Storage Gen2 container.
Which resource provider should you enable?

• A.Microsoft.EventHub
• B.Microsoft.EventGrid
• C.Microsoft.Sql
• D.Microsoft.Automation

Comment: *

Name: *

Email: *

Verification: *

You have a new Azure SQL database named DB1 on an Azure SQL server named AzSQL1.
The only user who was created is the server administrator.
You need to create a contained database user in DB1 who will use Azure Active Directory (Azure AD) for authentication.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Correct Answer:

1 - Set up the Active Directory Admin for AzSQL1.
2 - Connect to DB1 by using the Active Directory admin account.
3 - Create a user by using the FROM EXTERNAL PROVIDER clause.
Reference:
https://docs.microsoft.com/en-us/sql/t-sql/statements/create-user-transact-sql

Comment: *

Name: *

Email: *

Verification: *