70-432 Questions and Answers

Answer: D

QUESTION: 192 DRAG DROP

You administer a Microsoft SQL Server 2008 R2 database instance. The service account used by SQL Server services must not have administrative permissions.

You configure a new SQL Server Agent job to run every night. One of the steps in the job runs an Operating System (CmdExec) step. The job continuously fails on this step and throws the following error message: "The user does not have sufficient permission to perform the operation."

Answer:

Explanation:

• Credentials provide SQL Server authenticated users with an identity outside of SQL Server, on the local machine or on the network domain.

  Credentials can also be used when a SQL Server authenticated user needs access to a domain resource, such as a file location to store a backup.

  To get Credential object properties, users can be a member of the public fixed server role.

• A SQL Server Agent proxy defines the security context for a job step. A proxy provides SQL Server Agent with access to the security credentials for a Microsoft Windows user. Each proxy can be associated with one or more subsystems. A job step that uses the proxy can access the specified subsystems by using the security context of the Windows user. Before SQL Server Agent runs a job step that uses a proxy, SQL Server Agent impersonates the credentials defined in the proxy, and then runs the job step by using that security context.

• Why does SQL Server Agent need proxy accounts? Every job step executes under a specific set of credentials that defines its execution context. It would be wrong for SQL Server Agent to let an average user run his job under the credentials of the SQL Server Agent service account. If this happened, the user could execute dangerous operating system commands, and see and modify SQL Server data not normally accessible. SQL Server Agent has no access to the job owner's password, so it cannot impersonate a job owner directly. Therefore SQL Server Agent needs to rely on a known set of credentials and a mapping that instructs SQL Server Agent to use these credentials on behalf of the user for a given subsystem task. This logical mapping is provided through a proxy account, that is, an account to be used as a proxy for the user. Most subsystems, except T−SQL, use proxy accounts.

• By itself, the proxy account object does not store usernames and passwords. The

  
  

  account needs to be mapped to a specific credential object that contains the username and password. The proxy account also needs to be associated with a subsystem that is going to use impersonated context for task execution. Finally, a proxy account needs to be tied to a user, allowing the user to create tasks belonging to a subsystem to be run under the aforementioned set of credentials

  
  

  QUESTION: 193

  You administer a Microsoft SQL Server 2008 R2 instance. You need to check the physical consistency of the database. What should you do?

  
  

  1. Execute sp_helpfile.

  2. Execute DBCC CHECKDB.

  3. Examine the msdb..suspect_pagestable.

  4. Execute DBCC CHECKDBalong with the REPAIR_FASTclause.

  5. Execute DBCC CHECKDB along with the REPAIR_REBUILDcla.se

  6. Restore the database from the most recent full backup. Apply any differential and log backups.

  7. Use the ALTER DATABASEstatement along with the SET EMERGENCYclause.

  8. Use the RESTORE DATABASEstatement along with the PAGESclause. Create a new log backup. Apply all differential and log backups, including the most recent backup.

  9. Use the RESTORE DATABASEstatement along with the PAGESclause. Apply any differential and log backups. Create a new log backup and then restore the new log backup.

  
  

  Answer: B

  
  

  QUESTION: 194

  You administer a Microsoft SQL Server 2008 R2 instance.

  You need to rectify a damaged index without losing any data. What should you do?

  
  

  1. Execute sp_helpfile.

  2. Execute DBCC CHECKDB.

  3. Examine the msdb..suspect_pagestable.

  4. Execute DBCC CHECKDBalong with the REPAIR_FASTclause.

  5. Execute DBCC CHECKDB along with the REPAIR_REBUILDcla.se

  6. Restore the database from the most recent full backup. Apply any differential and log backups.

  7. Use the ALTER DATABASEstatement along with the SET EMERGENCYclause.

  8. Use the RESTORE DATABASEstatement along with the PAGESclause. Create a new log backup. Apply all differential and log backups, including the most recent backup.

  9. Use the RESTORE DATABASEstatement along with the PAGESclause. Apply any

  
  

  differential and log backups. Create a new log backup and then restore the new log backup.

  
  

  Answer: E

  
  

  QUESTION: 195

  You administer a SQL Server 2008 instance that contains a database named DB1. DB1 contains a table named Sales.Table1.

  You need to obtain the effective permissions of a user named User1 to access the Sales.Table1 table. Which Transact−SQL statement(s) should you execute in the DB1 database?

  
  

  1. Option A

  2. Option B

  3. Option C

  4. Option D Answer: B QUESTION: 196

  
  

  DRAG DROP

  You administer a Microsoft SQL Server 2008 R2 instance by using a database named AdventureWorks2008R2. You need to implement transparent data encryption for a database hosted by the server. Which four Transact−SQL statements should you use? (To answer, move the appropriate SQL statements from the list of statements to the answer area and arrange them in the correct order.)

  
  

  Answer:

  
  

  Explanation:

  Note:

• Using Transparent Data Encryption To use TDE, follow these steps. Create a master key Create or obtain a certificate protected by the master key Create a database encryption key and protect it by the certificate Set the database to use encryption

The following example illustrates encrypting and decrypting the AdventureWorks2012 database using a certificate installed on the server named MyServerCert. USE master; GO CREATE MASTER KEY ENCRYPTION BY PASSWORD =

'<UseStrongPasswordHere>'; go CREATE CERTIFICATE MyServerCert WITH SUBJECT = 'My DEK Certificate'; go USE AdventureWorks2012; GO CREATE DATABASE ENCRYPTION KEY WITH ALGORITHM = AES_128 ENCRYPTION BY SERVER CERTIFICATE MyServerCert;

GO ALTER DATABASE AdventureWorks2012 SET ENCRYPTION ON; GO

Reference: Transparent Data Encryption (TDE)

QUESTION: 197 DRAG DROP

You administer a Microsoft SQL Server 2008 R2 database installed along with the default settings. You want to migrate a database from a SQL Server 2000 server that is

being decommissioned. The application executes a number of Windows command−line

calls from stored procedures in the database.

You need to configure SQL Server 2008 R2 to allow command−line calls from this database. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.)

Answer:

Explanation:

Note:

You would need administrator permission.

The xp_cmdshell option is a server configuration option that enables system administrators to control whether the xp_cmdshell extended stored procedure can be executed on a system. −−−− To allow advanced options to be changed.

EXEC sp_configure ‘show advanced options’, 1 GO —− To update the currently configured value for advanced options. RECONFIGURE GO —− To enable the feature. EXEC sp_configure ‘xp_cmdshell’, 1 GO

QUESTION: 198

You administer a SQL Server 2008 instance. A payroll application is used to store sensitive data in a database named PayrollDB. You plan to implement the following

security measure: −All the data files, log files, and backup files of the database are automatically encrypted. You need to devise a method to encrypt data. What should you include in your solution?

A. Use a certificate to protect the data encryption key. Export the certificate to a file.

B. Use cell−level encryption to protect sensitive data.

1. Use a symmetric key provisioned through Extensible Key Management (EKM).

2. Use Transparent Data Encryption (TDE) for the PayrollDB database.

Answer: B

QUESTION: 199

You administer a Microsoft SQL Server 2008 R2 database that contains an OrderItems table. The table has the following definition:

Currently, the table is not partitioned and contains no indexes. You need to partition the table by year. What should you do?

1. Remove the clustered index from the table.

2. Use the ALTER PARTITION FUNCTION ... SPLIT RANGE statement.

3. Use the ALTER TABLEstatement to remove the COLLATEoption.

4. Execute the DBCC CLEANTABLEcommand on the OrderItems table. E.

• Create a new filegroup.

• Create a new database file.

• Use the ALTER PARTITION SCHEME statement along with the NEXT USED

  clause.

• Use ALTER INDEX REORGANIZE statement.

  F.

• Create a new Filegroup.

• Create a new database File.

  
  

• Use the ALTER PARTITION SCHEME statement along with the NEXT USED clause.

• Use the ALTER PARTITION FUNCTION statement along with the SPLIT RANGE

  clause. G.

• Create a new table.

• Use the ALTER TABLE statement along with the SWITCH PARTITION clause.

• Use the ALTER PARTITION FUNCTION statement along with the MERGE RANGE clause. H.

• Create a new partition function.

• Create a new partition scheme.

• Add a clustered index to place the data onto the partition scheme.

I. Run the following statement: CREATE PARTITION SCHEME SEC_FG AS PARTITION FUNC_FG

ALL TO (SECONDARY);

J. Run the following statement: EXECUTE sp_tableoption

@TableNamePattern =’OrderItem3',

@OptionName= ‘PartltionByYear’;

@OptionValue= 'true’;

Answer: H