You are a database administrator for AIOTestKing.com. The company runs a popular database-driven Web site against a SQL Server 2005 computer named AIOTestKing B. You need to ensure a quick response time and appropriate audit trail in the event that AIOTestKing B experiences excessive traffic due to denial-of-service (DoS) attacks. Which two actions should you perform? (Each correct answer presents part of the solution.
Choose two.)
A.
Configure the new performance alert to start a SQL Server Profiler trace.
B.
Create a new performance alert to monitor the Current Bandwidth counter.
C.
Configure the new performance alert to start a Network Monitor capture.
D.
Create a new performance alert to monitor the Bytes Total/sec counter.
Explanation:
Using alerts, System Monitor tracks specific events and notifies you of these events as requested. An alert log can monitor the current performance of selected counters and instances for objects in SQL Server. When a counter exceeds a given value, the log records the date and time of the event. An event can also generate a network alert. Characteristic for a typical DoS attack is a large number of Bytes/sec. Characteristic for a DDoS attack is also a large number of Bytes/sec but also a large number of connections made from a large number of hosts.