Administering Relational Databases on Microsoft Azure — Question 75
You have an Azure subscription that contains 50 instances of SQL Server on Azure Virtual Machines. The instances host 500 Azure SQL databases.
You need to ensure that all the databases have the same configuration. The solution must meet the following requirements:
✑ Auditing must be enabled.
✑ Azure Defender must be enabled.
✑ Public network access must be disabled.
✑ Administrative effort must be minimized.
Which two resources should you create in the subscription? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Answer options
- A. an Azure Automation runbook
- B. an Azure Policy initiative
- C. an Azure Policy assignment
- D. an Azure Automation account
- E. an Azure Policy definition
Correct answer: C, E
Explanation
The correct answers are C and E. Creating an Azure Policy definition allows you to set policies that enforce compliance across all databases, while an Azure Policy assignment applies those policies to the specific databases. The other options, while useful for automation or broader policy management, do not specifically address the need for consistent configuration across all databases.