exam questions

Exam AZ-400 All Questions

View all questions & answers for the AZ-400 exam

Exam AZ-400 topic 4 question 32 discussion

Actual exam question from Microsoft's AZ-400
Question #: 32
Topic #: 4
[All AZ-400 Questions]

SIMULATION -
You manage a website that uses an Azure SQL Database named db1 in a resource group named RG1lod11566895.
You need to modify the SQL database to protect against SQL injection.
To complete this task, sign in to the Microsoft Azure portal.

Show Suggested Answer Hide Answer
Suggested Answer: See explanation below.
Set up Advanced Threat Protection in the Azure portal
1. Sign into the Azure portal.
2. Navigate to the configuration page of the server you want to protect. In the security settings, select Advanced Data Security.
3. On the Advanced Data Security configuration page:

4. Enable Advanced Data Security on the server.
Note: Advanced Threat Protection for Azure SQL Database detects anomalous activities indicating unusual and potentially harmful attempts to access or exploit databases. Advanced Threat Protection can identify Potential SQL injection, Access from unusual location or data center, Access from unfamiliar principal or potentially harmful application, and Brute force SQL credentials
Reference:
https://docs.microsoft.com/en-us/azure/storage/common/storage-account-create https://docs.microsoft.com/en-us/azure/azure-sql/database/threat-detection-configure

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
meinekarte
Highly Voted 3 years, 6 months ago
From the Azure portal, open your server or managed instance. Under the Security heading, select Security Center. Select Enable Azure Defender for SQL. https://docs.microsoft.com/en-us/azure/azure-sql/database/azure-defender-for-sql#enable-azure-defender-for-azure-sql-database-at-the-resource-level
upvoted 24 times
waqas
2 years, 6 months ago
From the Azure portal, open your server or managed instance. Under the Security heading, select Defender for Cloud. Select Enable Microsoft Defender for SQL.
upvoted 7 times
...
rdemontis
2 years, 7 months ago
correct
upvoted 1 times
...
kumud
3 years, 2 months ago
correct
upvoted 1 times
...
...
PlumpyTumbler
Highly Voted 2 years, 9 months ago
The Azure Portal interface is changing all the time. The given answer and all comments so far are obsolete as of 1/24/22. Because of that, don't expect to see a simulation like this on the exam. However, if you want to follow the trail of breadcrumbs to accomplish this: Under security in your Azure SQL DB, click "Microsoft Defender for Cloud" The click "View all recommendations in defender for cloud" Expand "Enable enhanced security features" Click "Microsoft Defender for Azure SQL Database servers should be enabled" At the top of the page click "Enforce" In the Scope section: assign the resource group from the question To finish, click select or create or whatever the blue button says at the time you are viewing this and you're done. Keep in mind, that by 3/1/22 this could be obsolete as well because the portal changes all the time.
upvoted 17 times
PlumpyTumbler
2 years, 9 months ago
https://docs.microsoft.com/en-us/azure/defender-for-cloud/defender-for-sql-introduction?wt.mc_id=defenderforcloud_inproduct_portal_recoremediation&WT.mc_id=Portal-Microsoft_Azure_Security
upvoted 2 times
...
...
ozbonny
Most Recent 8 months, 1 week ago
From the Azure portal, open your server or managed instance. Under the Security heading, select Defender for Cloud. Select Enable Microsoft Defender for SQL.
upvoted 4 times
...
Tyler2023
1 year, 1 month ago
You can follow this instructions: https://learn.microsoft.com/en-us/azure/azure-sql/database/threat-detection-configure?view=azuresql Configure Advanced Threat Protection for Azure SQL Database Advanced Threat Protection for Azure SQL Database detects anomalous activities indicating unusual and potentially harmful attempts to access or exploit databases. Advanced Threat Protection can identify Potential SQL injection, Access from unusual location or data center, Access from unfamiliar principal or potentially harmful application, and Brute force SQL credentials - see more details in Advanced Threat Protection alerts. You can receive notifications about the detected threats via email notifications or Azure portal Advanced Threat Protection is part of the Microsoft Defender for SQL offering, which is a unified package for advanced SQL security capabilities. Advanced Threat Protection can be accessed and managed via the central Microsoft Defender for SQL portal.
upvoted 1 times
...
yana_b
1 year, 2 months ago
Detailed steps for enabling on the defender on both subscription and resource level can be found here: https://learn.microsoft.com/en-us/azure/azure-sql/database/azure-defender-for-sql?view=azuresql
upvoted 2 times
yana_b
1 year, 2 months ago
As per my understanding, the question refers to enabling the defender on resource level and not on subscription level.
upvoted 1 times
...
...
yana_b
1 year, 3 months ago
Solution provided by meinekarte is correct
upvoted 2 times
...
Govcomm
2 years, 3 months ago
Microsoft Defender for Azure SQL
upvoted 1 times
...
Ashutosh_9608
3 years ago
https://docs.microsoft.com/en-us/azure/azure-sql/database/threat-detection-configure
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago