최신Microsoft Administering Relational Databases on Microsoft Azure (DP-300日本語版) - DP-300日本語무료샘플문제
AzSQL1 という名前の Azure SQL サーバーに、DB1 という名前の新しい Azure SQL データベースがあります。
作成された唯一のユーザーはサーバー管理者です。
認証に Azure Active Directory (Azure AD) を使用する包含データベース ユーザーを DB1 に作成する必要があります。
順番に実行する必要がある 3 つのアクションはどれですか。回答するには、適切なアクションをアクション リストから回答領域に移動し、正しい順序に並べます。


Explanation:

Step 1: Set up the Active Directory Admin for AzSQL1.
Step 2: Connect to DB1 by using the server administrator.
Sign into your managed instance with an Azure AD login granted with the sysadmin role.
Step 3: Create a user by using the FROM EXTERNAL PROVIDER clause.
FROM EXTERNAL PROVIDER is available for creating server-level Azure AD logins in SQL Database managed instance. Azure AD logins allow database-level Azure AD principals to be mapped to server-level Azure AD logins. To create an Azure AD user from an Azure AD login use the following syntax:
CREATE USER [AAD_principal] FROM LOGIN [Azure AD login]
Reference:
https://docs.microsoft.com/en-us/sql/t-sql/statements/create-user-transact-sql
ハイパースケール サービス層 SQLD81 に SQLDB1 という名前の Azure SQL データベースを含む Azure サブスクリプションがあります。このデータベースでは、ゾーン冗長ストレージ (ZRS) が有効になっています。ペアになっている Azure リージョンに SQLDB1 のコピーを作成する必要があります。このソリューションでは、管理作業を最小限に抑える必要があります。最初に何をすべきですか?
タスク1
db1 という名前の Azure SQL データベースで、SalesLT.SalesOrderHeader テーブルの PK_SalesOrderHeader_SalesOrderlD クラスター化インデックスでページ圧縮を有効にする必要があります。
Explanation:
To enable page compression on the PK_SalesOrderHeader_SalesOrderlD clustered index of the SalesLT.
SalesOrderHeader table in db1, you can use the following Transact-SQL script:
-- Connect to the Azure SQL database named db1
USE db1;
GO
-- Enable page compression on the clustered index
ALTER INDEX PK_SalesOrderHeader_SalesOrderlD ON SalesLT.SalesOrderHeader REBUILD WITH (DATA_COMPRESSION = PAGE); GO This script will rebuild the clustered index with page compression, which can reduce the storage space and improve the query performance The script solution consists of three parts:
The first part is USE db1; GO. This part connects to the Azure SQL database named db1, where the SalesLT.
SalesOrderHeader table is located. The GO command separates the batches of Transact-SQL statements and sends them to the server.
The second part is ALTER INDEX PK_SalesOrderHeader_SalesOrderlD ON SalesLT.SalesOrderHeader REBUILD WITH (DATA_COMPRESSION = PAGE); GO. This part enables page compression on the clustered index named PK_SalesOrderHeader_SalesOrderlD, which is defined on the SalesLT.
SalesOrderHeader table. The ALTER INDEX statement modifies the properties of an existing index.
The REBUILD option rebuilds the index from scratch, which is required to change the compression setting.
The DATA_COMPRESSION = PAGE option specifies that page compression is applied to the index, which means that both row and prefix compression are used. Page compression can reduce the storage space and improve the query performance by compressing the data at the page level. The GO command ends the batch of statements.
The third part is optional, but it can be useful to verify the compression status of the index. It is SELECT name, index_id, data_compression_desc FROM sys.indexes WHERE object_id = OBJECT_ID( ' SalesLT.
SalesOrderHeader ' );. This part queries the sys.indexes catalog view, which contains information about the indexes in the database. The SELECT statement returns the name, index_id, and data_compression_desc columns for the indexes that belong to the SalesLT.SalesOrderHeader table. The OBJECT_ID function returns the object identification number for the table name. The data_compression_desc column shows the compression type of the index, which should be PAGE for the clustered index after the script is executed.
These are the steps of the script solution for enabling page compression on the clustered index of the SalesLT.
SalesOrderHeader table in db1.
DB1 という Azure SQL データベースがあり、そこには Orders というテーブルがあります。Orders テーブルには、販売注文ごとに 1 行ずつ格納されています。各販売注文には、注文を行ったユーザーの名前が含まれています。
行レベルセキュリティ(RLS)を実装する必要があります。ソリューションでは、ユーザーが自分の販売注文のみを表示できるようにする必要があります。
解決策には何を含めるべきですか? 回答するには、回答エリアで適切なオプションを選択してください。
注意: 正しい選択ごとに 1 ポイントが加算されます。


Explanation:

Basic Concept: This question tests secure database administration, where the control must match the data state, access boundary, identity model, or compliance requirement.
Why the selected answer is Correct: The selected values fit this scenario because they apply the required Azure SQL configuration at the correct scope and sequence: You need to implement row-level security (RLS).
Why the alternate choices are Wrong: The alternate selections apply to different administrative stages or different scopes. In a hotspot or drag-drop task, order and scope are part of the answer, so a technically valid Azure feature can still be wrong if it is placed in the wrong step.
ResearchDB1 に認証を実装する必要があります。ソリューションはセキュリティとコンプライアンスの要件を満たす必要があります。
実装の一環として何を実行する必要がありますか?
タスク10
sql37006S95 上のすべてのデータベースを SQL インジェクション攻撃から保護する必要があります。
Explanation:
SQL injection attacks are a type of cyberattack that exploit a vulnerability in the application code that interacts with the database. An attacker can inject malicious SQL statements into the user input, such as a form field or a URL parameter, and execute them on the database server, resulting in data theft, corruption, or unauthorized access1.
To protect all the databases on sql37006S95 from SQL injection attacks, you need to follow some best practices for securing your application and database layers. Here are some of the recommended steps:
Use parameterized queries or stored procedures to separate the SQL code from the user input. This will prevent the user input from being interpreted as part of the SQL statement and avoid SQL injection23.
Validate and sanitize the user input before passing it to the database. This will ensure that the input conforms to the expected format and type, and remove any potentially harmful characters or keywords4.
Implement least privilege access for the database users and roles. This will limit the permissions and actions that the application can perform on the database, and reduce the impact of a successful SQL injection attack5.
Enable Advanced Threat Protection for Azure SQL Database. This is a feature that detects and alerts you of anomalous activities and potential threats on your database, such as SQL injection, brute force attacks, or unusual access patterns. You can configure the alert settings and notifications using the Azure portal or PowerShell.
These are some of the steps to protect all the databases on sql37006S95 from SQL injection attacks.
Azure サブスクリプションをお持ちです。
Bicep テンプレートを使用して、Azure SQL Database の論理サーバーをプロビジョニングする必要があります。
テンプレートをどのように完成させるべきですか? 回答するには、回答の中から適切なオプションを選択してください。注: 正しい選択ごとに 1 ポイントが加算されます。


Explanation:

Basic Concept: This question tests configure and manage automation of tasks in the DP-300 exam context.
The correct choice is determined by the exact service boundary and operational requirement stated in the scenario.
Why the selected answer is Correct: The selected values fit this scenario because they apply the required Azure SQL configuration at the correct scope and sequence: You need to provision a logical server for Azure SQL Database by using a Bicep template.
Why the alternate choices are Wrong: The alternate selections apply to different administrative stages or different scopes. In a hotspot or drag-drop task, order and scope are part of the answer, so a technically valid Azure feature can still be wrong if it is placed in the wrong step.
Azure SQL マネージド インスタンスがあります。
クエリ プランの最後の実行とそのランタイム統計を収集する必要があります。ソリューションは、現在実行中のクエリへの影響を最小限に抑える必要があります。
あなたは何をするべきか?
DB1 という名前の Azure SQL データベースがあります。DB1 には、Col1 という名前の列を持つテーブルが含まれています。
Col1 のデータを暗号化する必要があります。
DB1 に対して順番に実行する必要がある 4 つのアクションはどれですか。回答するには、適切なアクションをアクション リストから回答領域に移動し、正しい順序に並べます。


Explanation:

Reference:
https://www.sqlshack.com/an-overview-of-the-column-level-sql-server-encryption/ Basic Concept: This question tests implement a secure environment in the DP-300 exam context. The correct choice is determined by the exact service boundary and operational requirement stated in the scenario.
Why the selected answer is Correct: The selected values fit this scenario because they apply the required Azure SQL configuration at the correct scope and sequence: You need to encrypt the data in Col1.
Why the alternate choices are Wrong: The alternate selections apply to different administrative stages or different scopes. In a hotspot or drag-drop task, order and scope are part of the answer, so a technically valid Azure feature can still be wrong if it is placed in the wrong step.
Explanation:
To generate an email alert to [email protected] when CPU percentage utilization for db1 is higher than average, you can use the Azure portal to create an alert rule based on the CPU percentage metric. Here are the steps to do that:
Go to the Azure portal and select your Azure SQL Database server that hosts db1.
Select Alerts in the Monitoring section and click on New alert rule.
In the Condition section, click Add and select the CPU percentage metric.
In the Configure signal logic page, set the threshold type to Dynamic. This will compare the current metric value to the historical average and trigger the alert when it deviates significantly1.
Set the operator to Greater than, the aggregation type to Average, the aggregation granularity to 1 minute, and the frequency of evaluation to 5 minutes.
Click Done to save the condition.
In the Action group section, click Create and enter a name and a short name for the action group.
In the Notifications section, click Add and select Email/SMS message/Push/Voice.
Enter [email protected] in the Email field and click OK.
Click OK to save the action group.
In the Alert rule details section, enter a name and a description for the alert rule, choose a severity level, and make sure the rule is enabled.
Click Create alert rule to create the alert rule.
This alert rule will send an email to [email protected] when the CPU percentage utilization for db1 is higher than average. You can also add other actions to the alert rule, such as calling a webhook or running an automation script
Instance1への移行後、App1からDB1およびDB2へのアクセスに必要な認証ソリューションを推奨する必要があります。このソリューションは可用性要件を満たす必要があります。
どのアクションを順番に実行する必要がありますか? 回答するには、適切なアクションを正しい順序にドラッグします。
各アクションは1回、複数回、またはまったく使用されない場合があります。コンテンツを表示するには、ペイン間の分割バーをドラッグするか、スクロールする必要がある場合があります。
注意: 正しい選択ごとに 1 ポイントが加算されます。


Explanation:

Basic Concept: This question tests choosing the correct Azure migration approach by matching the source platform, target service, downtime tolerance, and administrative effort.
Why the selected answer is Correct: The selected values fit this scenario because they apply the required Azure SQL configuration at the correct scope and sequence: You need to recommend an authentication solution for App1 access to DB1 and DB2 after their migration to Instance1.
Why the alternate choices are Wrong: The alternate selections would either use a migration tier that does not match the downtime requirement, choose a network resource that does not support the migration path, or add an unnecessary deployment component.
DB3をリストアするためのバックアップソリューションを推奨してください。ソリューションは可用性要件を満たす必要があります。どのタイプのバックアップを使用すべきですか?
DB1という名前のAzure SQLデータベースがあり、それがServer 1という名前のSQLサーバー上でホストされています。
DB1を復元する必要があります。復元対象は、36時間以上前のデータのみとする必要があります。
PowerShellスクリプトをどのように完成させるべきですか?回答するには、回答欄で適切なオプションを選択してください。注:正解ごとに1ポイントが加算されます。


Explanation:

Basic Concept: This question tests high availability and disaster recovery design for Azure SQL, SQL Server on Azure VMs, and regional failure scenarios.
Why the selected answer is Correct: The selected values fit this scenario because they apply the required Azure SQL configuration at the correct scope and sequence: You need to restore DB1.
Why the alternate choices are Wrong: The alternate selections apply to different administrative stages or different scopes. In a hotspot or drag-drop task, order and scope are part of the answer, so a technically valid Azure feature can still be wrong if it is placed in the wrong step.
次の図に示すように、Azure Portal で Azure SQL データベースをプロビジョニングしています。

ドロップダウン メニューを使用して、グラフィックに表示された情報に基づいて各ステートメントを完成させる回答の選択肢を選択します。
注意: 正しい選択ごとに 1 ポイントが加算されます。


Explanation:

Reference:
https://docs.microsoft.com/en-us/azure/azure-sql/database/serverless-tier-overview Basic Concept: This question tests plan and implement data platform resources in the DP-300 exam context.
The correct choice is determined by the exact service boundary and operational requirement stated in the scenario.
Why the selected answer is Correct: The selected values fit this scenario because they apply the required Azure SQL configuration at the correct scope and sequence: You are provisioning an Azure SQL database in the Azure portal as shown in the following exhibit.
Why the alternate choices are Wrong: The alternate selections apply to different administrative stages or different scopes. In a hotspot or drag-drop task, order and scope are part of the answer, so a technically valid Azure feature can still be wrong if it is placed in the wrong step.