You are the database administrator of your company. The network contains a default instance of SQL Server 2008 named SQL1.
You configure the C2 auditing mode on SQL1 to audit all successful and failed attempts toaccess databases stored on the server. The auditing is configured to start automatically.
After several days, you discover that SQL1 has shut down due to lack of space in the data directory in which theaudit log files are being saved.
You want to restart SQL1 . What should you do?
A.
Restart SQL1 including the -f parameter.
B.
Restart SQL1 including the -m parameter.
C.
Restart SQL1 including the -s parameter.
D.
Restart SQL1 including the -x parameter.
Explanation:
You should restart SQL1 including the -f parameter. The C2 auditing mode allows you to configure an instance ofSQL Server to audit both successful and failed attempts to access statements and objects. You can configure theC2 auditing mode by using SQL Server Management Studio or using the sp_configure system stored procedure.The C2 audit trace data is stored in a file in the default data directory of the SQL Server instance. The maximumfile size for this file is 200 MB. When this file reaches its size limit, SQL Server creates a new file to write theauditing data and closes the old file. The file in which the auditing data is stored can grow very quickly becauseC2 auditing mode saves information about several events in the log file. When the data directory that contains thelog files runs out of space, SQL Server shuts down. In this situation, if auditing is configured to start automatically,you must either restart the instance including the -f parameter or free up hard disk space for the audit log. To starta default instance with the -f parameter from a command prompt, you should run the sqlservr.exe -f command.The -f parameter starts an instance of SQL Server with minimal configuration, which bypasses the C2 auditing. You should not restart SQL1 including the
-m parameter. The -m parameter starts an instance of SQL Server insingle-user mode. Using the -m parameter does not bypass C2 auditing, which is preventing SQL1 from startingin this scenario. You should not restart SQL1 including the -s parameter. The -s parameter starts a named instance of SQLServer. In this scenario, SQL1 is a default instance of SQL Server.Also, the -s parameter does not bypass the C2auditing mode. You should not restart SQL1 including the -x parameter. The -x parameter disables monitoring features, such as performance monitor counters. The -x parameter does not allow you to restart an instance of SQL Server that hasshut down due to lack of space in the data directory in which the audit log files are being saved.Objective:
Managing SQL Server SecuritySub-Objective:
Audit SQL Server instances.References:
MSDN > MSDN Library > Servers and Enterprise Development > SQL Server > SQL Server 2008 > ProductDocumentation > SQL Server 2008 Books Online > Database Engine > Operations > Administration > ManagingServers > Setting Server Configuration Options > c2 audit mode OptionTechNet > TechNet Library > Server Products and Technologies > SQL Server > SQL Server 2008 > ProductDocumentation > SQL Server 2008 Books Online > Database Engine > Operations > Administration > Managingthe Database Engine Services > Starting and Restarting Services > Using the SQL Server Service StartupOptions