70-462: Administering Microsoft SQL Server 2012/2014 Databases

You administer a Microsoft SQL Server database.

The database contains a table that has the following definition:

You want to export data from the table to a flat file by using the SQL Server Import and Export Wizard.

You need to ensure that the following requirements are met:

The first row of the file contains the first row of data.
Each record is of the same length.
The date follows the U.S. date format.
The file supports international characters.

What should you do? (To answer, configure the appropriate option or options in the dialog box in the answer area.)

Correct answer: To work with this question, an Exam Simulator is required.

Explanation:

References:http://msdn.microsoft.com/en-us/library/ms178804.aspxhttp://msdn.microsoft.com/en-us/library/ms187828.aspx

References:

http://msdn.microsoft.com/en-us/library/ms178804.aspx

http://msdn.microsoft.com/en-us/library/ms187828.aspx

You administer a Microsoft SQL Server database. The database has a table named Customers owned by UserA and another table named Orders owned by UserB. You also have a stored procedure named GetCustomerOrderInfo owned by UserB. GetCustomerOrderInfo selects data from both tables.

You create a new user named UserC.

You need to ensure that UserC can call the GetCustomerOrderInfo stored procedure. You also need to assign only the minimum required permissions to UserC.

Which permission or permissions should you assign to UserC? Each correct answer presents part of the solution.

The Select permission on Customers
The Execute permission on GetCustomerOrderInfo
The Take Ownership permission on Customers
The Control permission on GetCustomerOrderInfo
The Take Ownership permission on Orders
The Select permission on Orders

Correct answer: B

Explanation:

How Permissions Are Checked in a Chain When an object is accessed through a chain, SQL Server first compares the owner of the object to the owner of the calling object. This is the previous link in the chain. If both objects have the same owner, permissions on the referenced object are not evaluated. Due to ownership chaining, you would only need to give Execute permissions to UserC to access the Orders table since UserB is the owner. References: https://technet.microsoft.com/en-us/library/ms188676(v=sql.105).aspx

How Permissions Are Checked in a Chain

When an object is accessed through a chain, SQL Server first compares the owner of the object to the owner of the calling object. This is the previous link in the chain. If both objects have the same owner, permissions on the referenced object are not evaluated.

Due to ownership chaining, you would only need to give Execute permissions to UserC to access the Orders table since UserB is the owner.

References: https://technet.microsoft.com/en-us/library/ms188676(v=sql.105).aspx

You administer a Microsoft SQL Server 2012 database named ContosoDB. The database contains a table named Suppliers and a column named IsActive in the Purchases schemA.

You create a new user named ContosoUser in ContosoDB. ContosoUser has no permissions to the Suppliers table.

You need to ensure that ContosoUser can delete rows that are not active from Suppliers. You also need to grant ContosoUser only the minimum required permissions.

Which Transact-SQL statement should you use?

GRANT DELETE ON Purchases. Suppliers TC ContosoUser
CREATE PROCEDURE Purchases.PurgeInactiveSuppliers
WITH EXECUTE AS USER = 'dbo'
AS
DELETE FROM Purchases.Suppliers WHERE IsActive = 0
GO
GRANT EXECUTE ON Purchases.PurgelnactiveSuppliers TO ContosoUser
GRANT SELECT ON Purchases.Suppliers TO ContosoUser
CREATE PROCEDURE Purchases. PurgeInactiveSuppliers
AS
DELETE FROM Purchases.Suppliers WHERE IsActive = 0
GO
GRANT EXECUTE ON Purchases. PurgeInactiveSuppliers TO ContosoUser

Correct answer: D

Explanation:

Incorrect:Not B: The dbo , or database owner, is a user account that has implied permissions to perform all activities in the database. This would go against the requirement to grant ContosoUser only the minimum required permissions.References:http://msdn.microsoft.com/en-us/library/ms188354.aspxhttp://msdn.microsoft.com/en-us/library/ms187926.aspx

Incorrect:

Not B: The dbo , or database owner, is a user account that has implied permissions to perform all activities in the database. This would go against the requirement to grant ContosoUser only the minimum required permissions.

References:

http://msdn.microsoft.com/en-us/library/ms188354.aspx

http://msdn.microsoft.com/en-us/library/ms187926.aspx

You use a contained database named ContosoDb within a domain.

You need to create a user who can log on to the ContosoDb database. You also need to ensure that you can port the database to different database servers within the domain without additional user account configurations.

Which type of user should you create?

User mapped to a certificate
SQL user without login
Domain user
SQL user with login

Correct answer: C

Explanation:

Contained user There are two types of users for contained databases. Contained database user with password Contained database users with passwords are authenticated by the database. Windows principals Authorized Windows users and members of authorized Windows groups can connect directly to the database and do not need logins in the master database. The database trusts the authentication by Windows. References: https://docs.microsoft.com/en-us/sql/relational-databases/databases/contained-databases?view=sql-server-2017

Contained user

There are two types of users for contained databases.

Contained database user with password

Contained database users with passwords are authenticated by the database.

Windows principals

Authorized Windows users and members of authorized Windows groups can connect directly to the database and do not need logins in the master database.

The database trusts the authentication by Windows.

References: https://docs.microsoft.com/en-us/sql/relational-databases/databases/contained-databases?view=sql-server-2017

You administer a Microsoft SQL Server database that has multiple tables in the Sales schema.

Some users must be prevented from deleting records in any of the tables in the Sales schema.

You need to manage users who are prevented from deleting records in the Sales schema. You need to achieve this goal by using the minimum amount of administrative effort.

What should you do?

Create a custom database role that includes the users. Deny Delete permissions on the Sales schema for the custom database role.
Include the Sales schema as an owned schema for the db_denydatawriter role. Add the users to the db_denydatawriter role.
Deny Delete permissions on each table in the Sales schema for each user.
Create a custom database role that includes the users. Deny Delete permissions on each table in the Sales schema for the custom database role.

Correct answer: A

You are the lead database administrator (DBA) of a Microsoft SQL Server environment.

All DBAs are members of the DOMAIN\JrDBAs Active Directory group. You grant DOMAIN\JrDBAs access to the SQL Server.

You need to create a server role named SpecialDBARole that can perform the following functions:

View all databases.
View the server state.
Assign GRANT, DENY, and REVOKE permissions on logins.

You need to add DOMAIN\JrDBAs to the server role. You also need to provide the least level of privileges necessary.

Which three SQL statements should you use? Each correct answer presents part of the solution.

GRANT VIEW ANY DATABASE TO [SpecialDBARole];
GRANT VIEW SERVER STATE, VIEW ANY DATABASE TO [SpecialDBARole];
CREATE SERVER ROLE [SpecialDBARole] AUTHORIZATION securityadmin;
CREATE SERVER ROLE [SpecialDBARole] AUTHORIZATION sysadmin;
ALTER SERVER ROLE [SpecialDBARole] ADD MEMBER [DOMAIN\JrDBAs];
CREATE SERVER ROLE [SpecialDBARole];

Correct answer: BCE

You administer a Microsoft SQL Server 2012 database.

All database traffic to the SQL Server must be encrypted by using secure socket layer (SSL) certificates or the connection must be refused.

Network administrators have deployed server certificates to the Windows store of all Windows servers on the network from a trusted Certificate Authority. This is the only Certificate Authority allowed to distribute certificates on the network.

You enable the Force Encryption flag for the MSSQLServer protocols, but client computers are unable to connect. They receive the following error message:

"A connection was successfully established with the server, but then an error occurred during the pre-login handshake. (provider: SSL Provider, error: 0 - The certificate chain was issued by an authority that is not trusted.) (Microsoft SQL Server)"

You notice the following entry in the SQL Server log:

"A self-generated certificate was successfully loaded for encryption."

You need to configure SQL Server to encrypt all client traffic across the network.

You also need to ensure that client computers are able to connect to the server by using a trusted certificate.

Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

Correct answer: To work with this question, an Exam Simulator is required.

Explanation:

Reference:http://thesqldude.com/2012/04/21/setting-up-ssl-encryption-for-sql-server-using-certificates-issuestips-tricks/

Reference:

http://thesqldude.com/2012/04/21/setting-up-ssl-encryption-for-sql-server-using-certificates-issuestips-tricks/

You administer a Microsoft SQL Server database that has Trustworthy set to On. You create a stored procedure that returns database-level information from Dynamic Management Views.

You grant User1 access to execute the stored procedure.

You need to ensure that the stored procedure returns the required information when User1 executes the stored procedure. You need to achieve this goal by granting the minimum permissions required.

Which two actions should you perform? Each correct answer presents part of the solution.

Grant the VIEW SERVER STATE permission to User1.
Move the stored procedure to the User1 schema.
Modify the stored procedure to include the EXECUTE AS OWNER statement. Grant VIEW SERVER STATE permissions to the owner of the stored procedure.
Grant the db_datareader role on the database to User1.
Create a SQL Server login that has VIEW SERVER STATE permissions. Modify the stored procedure to include the EXECUTE AS (newlogin) statement.

Correct answer: CE

Explanation:

References:http://msdn.microsoft.com/en-us/library/ms187861.aspxhttp://msdn.microsoft.com/en-us/library/ms191291.aspx

References:

http://msdn.microsoft.com/en-us/library/ms187861.aspx

http://msdn.microsoft.com/en-us/library/ms191291.aspx

You are migrating a database named Orders to a new server that runs Microsoft SQL Server 2012.

You attempt to add the [Corpnet\User1] login to the database. However, you receive the following error message:

"User already exists in current database."

You need to configure the [Corpnet\User1] login to be able to access the Orders database and retain the original permissions. You need to achieve this goal by using the minimum required permissions.

Which Transact-SQL statement should you use?

DROP USER [User1];
CREATE USER [Corpnet\User1] FOR LOGIN [Corpnet\User1];
ALTER ROLE [db_owner] ADD MEM3ER [Corpnet\User1];
ALTER SERVER RCLS Isysadmin] ADD MEMBER [Corpnet\User1];
ALTER USER [Corpnet\User1] WITH LOGIN [Corpnet\User1];
ALTER ROLE [db owner] ADD MEMBBR [Corpnet\User1];

Correct answer: C

Explanation:

Reference:http://msdn.microsoft.com/en-us/library/ms176060.aspx

Reference:

http://msdn.microsoft.com/en-us/library/ms176060.aspx

You administer a Microsoft SQL Server 2012 database.

You configure Transparent Data Encryption (TDE) on the Orders database by using the following statements:

You attempt to restore the Orders database and the restore fails. You copy the encryption file to the original location.

A hardware failure occurs and so a new server must be installed and configured.

After installing SQL Server to the new server, you restore the Orders database and copy the encryption files to their original location. However, you are unable to access the database.

You need to be able to restore the database.

Which Transact-SQL statement should you use before attempting the restore?

Option A
Option B
Option C
Option D

Correct answer: C

Explanation:

To create a database protected by transparent data encryption The following procedures show you have to create a database protected by TDE using SQL Server Management Studio and by using Transact-SQL. Using SQL Server Management Studio 1. Create a database master key and certificate in the master database. 2. Create a backup of the server certificate in the master database. Etc. In transact sql:-- Create a database master key and a certificate in the master database. USE master ; GO CREATE MASTER KEY ENCRYPTION BY PASSWORD = '*rt@40(FL&dasl1'; GO CREATE CERTIFICATE TestSQLServerCert WITH SUBJECT = 'Certificate to protect TDE key' GO -- Create a backup of the server certificate in the master database. -- The following code stores the backup of the certificate and the private key file in the default data location for this instance of SQL Server -- (C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\DATA). BACKUP CERTIFICATE TestSQLServerCert TO FILE = 'TestSQLServerCert' WITH PRIVATE KEY ( FILE = 'SQLPrivateKeyFile', ENCRYPTION BY PASSWORD = '*rt@40(FL&dasl1' ); GO Etc. ' References:https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/move-a-tde-protected-database-to-another-sql-server

To create a database protected by transparent data encryption

The following procedures show you have to create a database protected by TDE using SQL Server Management Studio and by using Transact-SQL.

Using SQL Server Management Studio

1. Create a database master key and certificate in the master database.

2. Create a backup of the server certificate in the master database.

Etc.

In transact sql:

-- Create a database master key and a certificate in the master database.

USE master ;

GO

CREATE MASTER KEY ENCRYPTION BY PASSWORD = '*rt@40(FL&dasl1';

GO

CREATE CERTIFICATE TestSQLServerCert

WITH SUBJECT = 'Certificate to protect TDE key'

GO

-- Create a backup of the server certificate in the master database.

-- The following code stores the backup of the certificate and the private key file in the default data location for this instance of SQL Server

-- (C:\Program Files\Microsoft SQL Server\MSSQL13.MSSQLSERVER\MSSQL\DATA).

BACKUP CERTIFICATE TestSQLServerCert

TO FILE = 'TestSQLServerCert'

WITH PRIVATE KEY

(

FILE = 'SQLPrivateKeyFile',

ENCRYPTION BY PASSWORD = '*rt@40(FL&dasl1'

);

GO

Etc.

'

References:

https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/move-a-tde-protected-database-to-another-sql-server

Vendor:	Microsoft
Exam Code:	70-462
Exam Name:	Administering Microsoft SQL Server 2012/2014 Databases
Date:	May 22, 2018
File Size:	10 MB

Download Administering Microsoft SQL Server 2012-2014 Databases.70-462.PracticeDumps.2018-05-22.175q.vcex

How to open VCEX files?

Demo Questions

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

ProfExam at a 20% markdown