70-473

Question 1

You have a Microsoft Azure virtual machine that hosts a Microsoft SQL Server database. You need to configure firewall rules to meet the following requirements: ✑ Access the database remotely. ✑ Manage the server remotely by using Windows PowerShell. ✑ Manage the server remotely by using Remote Desktop. Which Azure endpoint ports should you open? To answer, drag the appropriate ports to the correct types of access. Each port may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. Select and Place:

Question 2

You have a Microsoft SQL Server instance on a Microsoft Azure virtual machine. The members of an Active Directory group named HelpDesk can log in to the SQL Server instance. You need to ensure that the members of HelpDesk can query dynamic management views and gather performance metrics from the SQL Server instance. Which three actions should you perform? Each correct answer presents part of the solution.

1. Add HelpDesk to the db_owner role for all of the databases.
2. Add HelpDesk to the new role.
3. Grant VIEW ANY DATABASE to the new role.
4. Grant VIEW SERVER STATE to the newrole.
5. Create a database role.
6. Create a server role.

Question 3

You have a Microsoft Azure SQL database. You need to ensure that you can use the Always Encrypted feature for the database. Which two components should you configure? Each correct answer presents part of the solution.

1. the Column Master Key
2. the database master key
3. the service master key
4. transparent data encryption (TDE)
5. the Column Encryption Key

Question 4

Your company has two offices located in London and New York. The London office has a public IP of 131.107.1.1 and a private IP subnet of 192.168.4.0/24. The New York office has a public IP of 131.107.15.1 and a private IP subnet of 192.168.8.0/24. You have a Microsoft Azure SQL database. Currently, only the users in the London office use the database. You plan to provide the users in the New York office with access to the database. You need to ensure that the New York office users can access the database. Which command should you execute?

1. EXECUTE sp_set_database_firewall_rule N’NewYork,’131.107.15.1’,’255.255.255.255’
2. EXECUTE sp_set_database_firewall_rule N’NewYork, ’192.168.8.0’, ‘192.168.8.255’;
3. EXECUTE sp_set_database_firewall_rule N’NewYork,’192.168.8.0’, ’255.255.255.0’;
4. EXECUTE sp_set_database_firewall_rule N’NewYork,’131.107.15.1’,’131.107.15.1’;

Question 5

You have a Microsoft SQL Server 2014 instance on a Microsoft Azure virtual machine. You need to ensure that all SQL Server audits are written to the Windows Security log. Which two actions should you perform? Each correct answer presents part of the solution.

1. Configure the Audit policy change policy.
2. Assign the Generate security audits user right.
3. Configure the Audit object access policy.
4. Assign the Log on as a service user right.
5. Configure the Audit the access of global system objects policy.