Microsoft Azure Security Engineer Associate AZ-500 Practice Question
Your company hosts 15 Azure SQL Databases on a single logical server. The security team must capture every SELECT statement that is executed against any of the databases and make the logs searchable in a Log Analytics workspace. New databases created on the same server must be audited automatically without extra configuration. Which configuration meets these requirements?
Configure an Extended Events session on each database that captures SELECT statements and exports the output to Azure Storage.
Enable Azure SQL auditing at the server level, set the destination to a Log Analytics workspace, and add the SCHEMA_OBJECT_ACCESS_GROUP action group.
Enable Azure SQL auditing at the database level for each database, set the destination to a Log Analytics workspace, and add the DATABASE_OBJECT_ACCESS_GROUP action group.
Create a diagnostic setting on the server to stream the SQLSecurityAuditEvents category to the Log Analytics workspace.
Configuring Azure SQL auditing at the server level causes the audit policy to apply to all existing databases and to any databases created later, fulfilling the automation requirement. Selecting a Log Analytics workspace as the audit destination lets the security team query the data with KQL. To ensure every SELECT is captured, you must include SCHEMA_OBJECT_ACCESS_GROUP, the action group designed to log all data-access events (SELECT, INSERT, UPDATE, DELETE, EXECUTE, RECEIVE) on schema-scoped objects. Other options either lack the needed action group, miss automatic database coverage, or rely on less-granular monitoring features.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is SCHEMA_OBJECT_ACCESS_GROUP in Azure SQL auditing?
Open an interactive chat with Bash
Why is enabling auditing at the server level beneficial compared to the database level in Azure SQL?
Open an interactive chat with Bash
What is a Log Analytics workspace, and how is it used in Azure SQL auditing?
Open an interactive chat with Bash
Microsoft Azure Security Engineer Associate AZ-500
Secure compute, storage, and databases
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .