You have SQL Server on an Azure virtual machine that contains a database named DB1. DB1 contains a table named CustomerPII.
You need to record whenever users query the CustomerPII table.
Which two options should you enable? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
To record whenever users query the CustomerPII table, you need to enable SQL Server audit and database audit specification. A SQL Server audit collects events occurring at the server or database level, while a database audit specification allows you to specify audit actions specific to a particular database. These components work together, with the SQL Server audit acting as a container for database audit specifications to log events for the CustomerPII table.
B, C. On SQL Server you need SQL Server audit and database audit specification that belongs to that SQL Server audit. Auditing in SQL Server differs from Azure SQL Server and server audit specification collects different things than database audit specifications where in Azure SQL Server Server and Database audits they are basically the same thing and only configured on the server or the database level.
ref: https://docs.microsoft.com/en-us/sql/relational-databases/security/auditing/create-a-server-audit-and-database-audit-specification?view=sql-server-ver15 should be B, C USE master ; GO -- Create the server audit. CREATE SERVER AUDIT Payrole_Security_Audit TO FILE ( FILEPATH = 'C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\DATA' ) ; GO -- Enable the server audit. ALTER SERVER AUDIT Payrole_Security_Audit WITH (STATE = ON) ; USE AdventureWorks2012 ; GO -- Create the database audit specification. CREATE DATABASE AUDIT SPECIFICATION Audit_Pay_Tables FOR SERVER AUDIT Payrole_Security_Audit ADD (SELECT , INSERT ON HumanResources.EmployeePayHistory BY dbo ) WITH (STATE = ON) ; GO
Database audit specification needs its parent component (Server Audit) answer: B,C
The SQL Server in Question is on an Azure VM, so that makes its a regular SQL (not Azure SQL), this should be B and C
Answer Is B&C
B, C https://solutioncenter.apexsql.com/es/auditoria-de-seguridad-de-bases-de-datos-sql-server/
B,C In Question clearly stating that SQL Server on Azure VM need particular on DB level audit(capture the query record ). which can be done by Database level audit specification and that must be linked with Server audit.
B, C https://solutioncenter.apexsql.com/es/auditoria-de-seguridad-de-bases-de-datos-sql-server/
You can not have a specification until you have created an audit. You cannot create a database level audit only a database level audit specification. You need to create the server level audit (B) first before you can create the specification (C).
A,C SQL Server audit lets you create server audits, which can contain server audit specifications for server level events, and database audit
Then that would be B, C (not A,C)
Answer is correct. B. SQL Server audit C. database audit specification
BC, no server audit specification on database audit specification
i agree with B & C Sql server Audit to see login activities C : and the DATABASE AUDIT SPECIFICATION