Exam AZ-500 topic 5 question 41 discussion

Actual exam question from Microsoft's AZ-500

Question #: 41
Topic #: 5

SIMULATION -
You need to enable Advanced Data Security for the SQLdb1 Azure SQL database. The solution must ensure that Azure Advanced Threat Protection (ATP) alerts are sent to [email protected].
To complete this task, sign in to the Azure portal and modify the Azure resources.

Show Suggested Answer

Suggested Answer:

1. In the Azure portal, type SQL in the search box, select SQL databases from the search results then select SQLdb1. Alternatively, browse to SQL databases in the left navigation pane.
2. In the properties of SQLdb1, scroll down to the Security section and select Advanced data security.
3. Click on the Settings icon.
4. Tick the Enable Advanced Data Security at the database level checkbox.
5. Click Yes at the confirmation prompt.
6. In the Storage account select a storage account if one isn't selected by default.
7. Under Advanced Threat Protection Settings, enter [email protected] in the Send alerts to box.
8. Click the Save button to save the changes.
Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/database/advanced-data-security

by thomastrain at Nov. 10, 2020, 12:43 p.m.

Comments

Submit Cancel

thomastrain

Highly Voted 4 years, 9 months ago

This has changed. Now you must go to Azure Sql servers -> click on your server name. Security -> Security Center. Under Advanced Threat Protection enter email address: [email protected] and click save.

upvoted 13 times

Stuudent

4 years, 7 months ago

Not necessarily. If you go to the database>Security>Security Center, click on Settings icon in the bar above the graphs, check "Enable Azure Defender for SQL server settings", you will get a following message: "This enables Azure Defender for SQL at the database level, enabling you to receive separate Advanced Threat Protection alerts for this database only. Generally we recommend enabling Azure Defender for SQL at the Server level, unless you have a particular requirement to separately generate alerts for this database. Do you want to continue?" Tested in live Azure environment.

upvoted 16 times

...

siuloongwoo

Highly Voted 3 years, 1 month ago

2022/06/26 To enable ATP for SQL: under SQL databases / select the database in the list / Under Database's Overview menu / look for Defender for Cloud for SQL - click it / there is an Upgrade button or Skip - click Skip / will enable the menu on left hand pane / under Security on left hand pane - click Microsoft Defender for Cloud / on right hand pane - click Enable Microsoft Defender for SQL. To enable alert sent to an email address: Under Monitoring on left hand pane - click Alerts / Click Create Alert Rule / Under Condition - add a condition - Select the type of Signal to get through the signal logic configuration / Under Action - add a new action grp or select an existing one / Get through the rest of configs - Details / Tags / Review + Create. Cheers!

upvoted 8 times

Pasapugazh

2 years, 10 months ago

In my perspective creation of alerts is not needed, instead user has to enable the defender for SQL in the db level then click on the configure option and add the recipient email address under the Advanced Threat Protection option. Supporting official document link:- https://learn.microsoft.com/en-us/azure/azure-sql/database/threat-detection-configure?view=azuresql

upvoted 5 times

...

Codelawdepp

Most Recent 1 year, 1 month ago

tested in lab 1. open SQLDB Database 2. Under security click in Microsoft Defender for cloud 3. don't upgrade - just click on the left hand menu on Environment settings 4. Select the relevant subscription. 5. Click on the left menu on "Email notifications" 6. in the middle below "Notification types" Check the box "Notify about alerts with the following severity" and fill in the Email recipients 7. save for reference: https://learn.microsoft.com/en-us/azure/azure-sql/database/azure-defender-for-sql?view=azuresql

upvoted 2 times

obaemf

10 months, 4 weeks ago

https://learn.microsoft.com/en-us/azure/azure-sql/database/threat-detection-configure?view=azuresql

upvoted 1 times

...

BMF

1 year, 9 months ago

This has changed- the below is correct: 1-From SQL database 2-Microsoft Defender for Cloud 3-Under "Enablement status: click on Configure 4-MICROSOFT DEFENDER FOR SQL --> switch to ON 5-Below Under "ADVANCED THREAT PROTECTION SETTINGS" --> click on Add your contact details to the subscription's email settings in Defender for Cloud. 6-Fill in the Email recipients 7- SAVE https://learn.microsoft.com/en-us/azure/azure-sql/managed-instance/threat-detection-configure?view=azuresql

upvoted 4 times

...

adamsca

3 years, 8 months ago

I would assume this Sim is no longer valid and will not show up on exam, unless updated. This is now called Microsoft Defender for SQL and Advanced Threat Protection for SQL alerts emails are sent by Defender for Cloud. https://docs.microsoft.com/en-us/azure/azure-sql/database/azure-defender-for-sql

upvoted 3 times

...

TAN

3 years, 11 months ago

ATP had been renamed to Defender

upvoted 2 times

...