SIMULATIONYou need to add a Microsoft Entra user named user2-12345678@examusers.com to db1. User2-12345678 must be able to read data from all the tables in db1 without being able to modify the data.To complete this task, sign in to the virtual machine. You may need to use SQL Server Management Studio and the Azure portal.
Answer(s): A
Stage 1: Create the userCreate a user with SSMS (SQL Server Management Studio)Step 1: In Object Explorer, expand the Databases folder.Step 2: Expand the database in which to create the new database user. [Here db1]Step 3: Right-click the Security folder, point to New, and select User....Step 4: In the Database User - New dialog box, on the General page, select one of the following user types from the User type list:SQL user with loginSQL user with password (when contained database is enabled) SQL user without loginUser mapped to a certificateUser mapped to an asymmetric key*-> Windows userStep 4a: Select Windows UserStep 5: When you select an option, the remaining options in the dialog may change. Some options only apply to specific types of database users. Some options can be left blank and will use a default value.User nameEnter a name for the new user. If you have chosen Windows user from the User type list, you can also select the ellipsis (...) to open the Select User or Group dialog box. [Specify User2-12345678]Step 6: Select OK.Stage 2: Assign permissionsAdditional OptionsThe Database User - New dialog box also offers options on four other pages: Owned Schemas, Membership, Securables, and Extended Properties.Step 7: Select SecurablesThe Securables page lists all possible securables and the permissions on those securables that can be granted to the login.Step 8: Select tablesStep 9: Grant Read Permission
https://learn.microsoft.com/en-us/sql/relational-databases/security/authentication-access/create-a-database- user
SIMULATIONYou need to ensure that db1 supports a minimum of one vCore, a maximum of four vCores, and a database of up to 45 GB.To complete this task, sign in to the virtual machine. You may need to use SQL Server Management Studio and the Azure portal.
vCore purchasing model - Azure SQL DatabaseSelect hardware configurationYou can select hardware configuration for a database or elastic pool in SQL Database at the time of creation. You can also change hardware configuration of an existing database or elastic pool.To select a hardware configuration when creating a SQL Database or poolStep 1: Start Azure portalStep 2: Go the Azure SQL page, select db1.Step 3: On the Overview page, select the Pricing tier link:Step 4: Select the Change configuration link:Step 5: Select the desired hardware configuration:Specify:Max vCores: 4Max storage: 45 GB
https://learn.microsoft.com/en-us/azure/azure-sql/database/service-tiers-sql-database-vcore
HOTSPOT (Drag and Drop is not supported)You have an on-premises Microsoft SQL Server database named DB1.You have an Azure subscription.You need to migrate DB1 to an Azure SQL service that meets the following requirements:Protects the confidentiality of sensitive data from malware and high-privileged unauthorized database administratorsSupports pattern matching for server-side database operationsUses a hardware-based encryption technologyWhich Azure SQL service and attestation service should you include in the solution? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Box 1: The Azure SQL Database vCore purchasing modelAzure SQL Service vCore purchasing model - Azure SQL DatabaseHardware configurationCommon hardware configurations in the vCore model include standard-series (Gen5), Fsv2-series, and *DC- series*. Hyperscale also provides an option for premium-series and premium-series memory optimized hardware. Hardware configuration defines compute and memory limits and other characteristics that affect workload performance.Box 2: Microsoft Azure AttestationAttestation serviceAlways Encrypted with secure enclaves enables the database engine to process encrypted data within a protected memory area called a secure enclave. Secure enclaves enhance the confidential computing capabilities of Always Encrypted by supporting pattern matching, various comparison operators, and in-place encryption.Always Encrypted can use one of the two attestation services:* Microsoft Azure Attestation - a cloud-based attestation solution.* Host Guardian Service (HGS) that implements Windows Defender System Guard runtime attestation.The below table captures the supported attestation protocols for the valid SQL product and enclave type combinations:Note:Supported enclave technologiesAlways Encrypted supports the following enclave technologies (or enclave types):* Virtualization-based Security (VBS) enclaves (also known as Virtual Secure Mode, or VSM enclaves) - a software-based technology that relies on Windows hypervisor and doesn't require any special hardware.*-> Intel Software Guard Extensions (Intel SGX) enclaves - a *hardware-based* trusted execution environment technology.
https://learn.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted-enclaves https://learn.microsoft.com/en-us/azure/azure-sql/database/service-tiers-sql-database-vcore
DRAG DROP (Drag and Drop is not supported)You have two on-premises Microsoft SQL Server instances named SQL1 and SQL2.You have an Azure subscription.You need to sync a subset of tables between the databases hosted on SQL1 and SQL2 by using SQL Data Sync.Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and Place:
Step 1: Create a sync groupSet up SQL Data Sync between databases in Azure SQL Database and SQL Server Create sync group [Step 1]Step 2: Deploy an Azure SQL databaseAdd sync membersAfter the new sync group is created and deployed, open the sync group and access the Databases page, where you will select sync members.Add a database on a SQL Server instance as a member to a sync group [Step 2]1. In the Member Database section, optionally add a database in a SQL Server instance to the sync group by selecting Add an On-Premises Database.2. The Configure On-Premises page opens where you can do the following things:3. Select Choose the Sync Agent Gateway. The Select Sync Agent page opens.Step 3: Install and configure the Client Sync Agent app on SQL1 on SQL24. On the Choose the Sync Agent page, choose whether to use an existing agent or create an agent. [Step 3]* Details omitted*Step 4: Sync Metadata Database database configuration5. On the server where sync client agent is installed, locate and run the Client Sync Agent app.5a. In the sync agent app, select Submit Agent Key. The Sync Metadata Database Configuration dialog box opens.5b. In the Sync Metadata Database Configuration dialog box, paste in the agent key copied from the Azure portal. Also provide the existing credentials for the server on which the Sync Metadata Database database is located. Select OK and wait for the configuration to finish. [Step 4]5c. Select Register to register a SQL Server database with the agent. The SQL Server Configuration dialog box opens.5d. etc.6. Etc.Step 5: Configure the sync groupConfigure sync groupAfter the new sync group members are created and deployed, go to the Tables section in the Database Sync Group page.* Details omitted*Incorrect:* Deploy an Azure SQL managed instance
https://learn.microsoft.com/en-us/azure/azure-sql/database/sql-data-sync-sql-server-configure
You have an on-premises Microsoft SQL Server 2022 instance that hosts a 60-TB production database named DB1.You plan to migrate DB1 to Azure.You need to recommend a hosting solution for DB1.Which Azure SQL Database service tier should you use to host DB1?
Need Hyperscale for the 60-TB database.Compare resource limitsThe vCore-based service tiers are differentiated based on database availability, storage type, performance, and maximum storage size. These differences are described in the following table:
https://learn.microsoft.com/en-us/azure/azure-sql/database/service-tier-hyperscale
Post your Comments and Discuss Microsoft DP-300 exam prep with other Community members: