SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads

By Microsoft · Question Mode

QuestionQ34

Secure storage, databases, and networking

You have an Azure subscription containing these resources:

  • An Azure SQL Database logical server named Server1 that contains a database named DB1
  • An Azure SQL Managed Instance named Instance1 that contains a database named DB2

You need to configure database auditing. The solution must meet these requirements:

  • Ensure audit data is centrally available in a location that supports KQL queries.
  • Minimize ongoing administrative effort as additional databases are added.

What should you configure?

Select
Auditing scope:
Auditing destination:
Explanation

Server-level auditing for Azure SQL Database applies to all existing and newly created databases on the logical server, reducing administration. SQL Managed Instance auditing is configured at the instance/server scope. Sending audit events to Azure Monitor logs makes them available in a Log Analytics workspace, where KQL queries can analyze the audit data.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!