What should you do?

You have been hired as the database administrator for your company.
The previous database administrator hasconfigured automatic auditing on an instance of SQL Server 2008 by using SQL Server Audit.
The ON_FAILURE=SHUTDOWN parameter for the SQL Server Audit is configured on the server to ensure thatthe server shuts down if an audit failure occurs.
You want to bypass the shutdowns caused by audit failures. What should you do?

You have been hired as the database administrator for your company.
The previous database administrator hasconfigured automatic auditing on an instance of SQL Server 2008 by using SQL Server Audit.
The ON_FAILURE=SHUTDOWN parameter for the SQL Server Audit is configured on the server to ensure thatthe server shuts down if an audit failure occurs.
You want to bypass the shutdowns caused by audit failures. What should you do?

A.
Start the server including the -c parameter.

B.
Start the server including the -m parameter.

C.
Start the server including the -s parameter.

D.
Start the server including the -n parameter.

Explanation:

You should start the server including the -m parameter. Auditing allows you to track and log various types ofevents on an instance of SQL Server. You can use various types of auditing methods in SQL Server 2008, suchas the SQL Server Audit feature, C2 auditing mode, SQL Trace, and data definition language (DDL) triggers.Audit events can be stored in a file, in the Windows Application event log, or in the Windows Security event log.To ensure that audit events are written to the Windows Security log, you must add the SQL Server serviceaccount to the Generate security audits policy and configure the Audit object access security policy for both Success and Failure . When you configure the ON_FAILURE=SHUTDOWN parameter for SQL Server Audit, theserver shuts down when an audit failure occurs. To bypass the shutdowns caused by audit failures, anadministrator can specify the -m parameter when starting the server. You should not start the server including the -c parameter because this will not allow you to bypass shutdownscaused by audit failures. The -c parameter shortens the startup time to start SQL Server from a command prompt. You should not start the server including the -s parameter because this will not allow you to bypass shutdownscaused by audit failures. The -s parameter starts a named instance of SQL Server. You should not start the server including the -n parameter because this will not allow you to bypass shutdownscaused by audit failures. The -n parameter prevents the use of the Windows application log to store SQL Serverevents.

Objective:
Managing SQL Server Security

Sub-Objective:
Audit SQL Server instances.

References:
MSDN > MSDN Library > Servers and Enterprise Development > SQL Server > SQL Server 2008 > ProductDocumentation > SQL Server 2008 Books Online > Database Engine > Security and Protection > SecureOperation > SQL Server Encryption > Auditing (Database Engine) > Understanding SQL Server Audit TechNet > TechNet Library > Server Products and Technologies > SQL Server > SQL Server 2008 > ProductDocumentation > SQL Server 2008 Books Online > Database Engine > Operations > Administration > Managingthe Database Engine Services > Starting and Restarting Services > Using the SQL Server Service StartupOptions



Leave a Reply 0

Your email address will not be published. Required fields are marked *