You have an Azure virtual machine based on a custom image named VM1.
VM1 hosts an instance of Microsoft SQL Server 2019 Standard.
You need to automate the maintenance of VM1 to meet the following requirements:
Automate the patching of SQL Server and Windows Server.
Automate full database backups and transaction log backups of the databases on VM1.
Minimize administrative effort.
What should you do first?

• A.Enable a system-assigned managed identity for VM1
• B.Register VM1 to the Microsoft.Sql resource provider
• C.Install an Azure virtual machine Desired State Configuration (DSC) extension on VM1
• D.Register VM1 to the Microsoft.SqlVirtualMachine resource provider

Comment: *

Name: *

Email: *

Verification: *

You have an Azure virtual machine named VM1 on a virtual network named VNet1. Outbound traffic from VM1 to the internet is blocked.
You have an Azure SQL database named SqlDb1 on a logical server named SqlSrv1.
You need to implement connectivity between VM1 and SqlDb1 to meet the following requirements:
* Ensure that all traffic to the public endpoint of SqlSrv1 is blocked.
* Minimize the possibility of VM1 exfiltrating data stored in SqlDb1.
What should you create on VNet1?

• A.a VPN gateway
• B.a service endpoint
• C.a private link
• D.an ExpressRoute gateway

Comment: *

Name: *

Email: *

Verification: *

You have SQL Server on an Azure virtual machine.
You review the query plan shown in the following exhibit.

For each of the following statements, select yes if the statement is true. Otherwise, select no.
NOTE: Each correct selection is worth one point.

Correct Answer:

Reference:
https://docs.microsoft.com/en-us/sql/relational-databases/performance/monitoring-performance-by-using-the-query-store

Comment: *

Name: *

Email: *

Verification: *

You configure version control for an Azure Data Factory instance as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.

Correct Answer:

Reference:
https://docs.microsoft.com/en-us/azure/data-factory/source-control

Comment: *

Name: *

Email: *

Verification: *

DRAG DROP
You have an Azure SQL database that contains a table named Employees. Employees contains a column
named Salary.
You need to encrypt the Salary column. The solution must prevent database administrators from reading the
data in the Salary column and must provide the most secure encryption.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of
actions to the answer area and arrange them in the correct order.
Select and Place:

Correct Answer:

Section: [none]
Explanation:
Step 1: Create a column master key
Create a column master key metadata entry before you create a column encryption key metadata entry in the
database and before any column in the database can be encrypted using Always Encrypted.
Step 2: Create a column encryption key.
Step 3: Encrypt the Salary column by using the randomized encryption type.
Randomized encryption uses a method that encrypts data in a less predictable manner. Randomized encryption
is more secure, but prevents searching, grouping, indexing, and joining on encrypted columns.
Note: A column encryption key metadata object contains one or two encrypted values of a column encryption
key that is used to encrypt data in a column. Each value is encrypted using a column master key.
Incorrect Answers:
Deterministic encryption.
Deterministic encryption always generates the same encrypted value for any given plain text value. Using
deterministic encryption allows point lookups, equality joins, grouping and indexing on encrypted columns.
However, it may also allow unauthorized users to guess information about encrypted values by examining
patterns in the encrypted column, especially if there's a small set of possible encrypted values, such as True/
False, or North/South/East/West region.
Reference:
https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted-database-
engine

Comment: *

Name: *

Email: *

Verification: *