Skip to content

Commit 6f9dd3d

Browse files
committed
Technical Review 1044256: Secure your Azure SQL Database
1 parent 6b53860 commit 6f9dd3d

File tree

9 files changed

+216
-216
lines changed

9 files changed

+216
-216
lines changed
Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.secure-your-azure-sql-database.0-introduction
3-
metadata:
4-
title: Introduction
5-
description: Introduction
6-
ms.date: 11/07/2023
7-
author: VanMSFT
8-
ms.author: vanto
9-
manager: jroth
10-
ms.topic: unit
11-
title: Introduction
12-
durationInMinutes: 2
13-
content: |
14-
[!include[](includes/0-introduction.md)]
1+
### YamlMime:ModuleUnit
2+
uid: learn.secure-your-azure-sql-database.0-introduction
3+
metadata:
4+
title: Introduction
5+
description: Introduction
6+
ms.date: 05/08/2025
7+
author: VanMSFT
8+
ms.author: vanto
9+
manager: jroth
10+
ms.topic: unit
11+
title: Introduction
12+
durationInMinutes: 2
13+
content: |
14+
[!include[](includes/0-introduction.md)]
Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,18 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.secure-your-azure-sql-database.1-create-database
3-
metadata:
4-
title: Exercise - Set up sandbox environment
5-
description: Create an Azure SQL Database and a Linux VM for use throughout this module.
6-
ms.date: 11/07/2023
7-
author: VanMSFT
8-
ms.author: vanto
9-
manager: jroth
10-
ms.topic: unit
11-
ms.custom: linux-related-content
12-
interactive: bash
13-
azureSandbox: true
14-
title: Exercise - Set up sandbox environment
15-
durationInMinutes: 10
16-
content: |
17-
[!include[](includes/1-create-database.md)]
18-
1+
### YamlMime:ModuleUnit
2+
uid: learn.secure-your-azure-sql-database.1-create-database
3+
metadata:
4+
title: Exercise - Set up sandbox environment
5+
description: Create an Azure SQL Database and a Linux VM for use throughout this module.
6+
ms.date: 05/08/2025
7+
author: VanMSFT
8+
ms.author: vanto
9+
manager: jroth
10+
ms.topic: unit
11+
ms.custom: linux-related-content
12+
interactive: bash
13+
azureSandbox: true
14+
title: Exercise - Set up sandbox environment
15+
durationInMinutes: 10
16+
content: |
17+
[!include[](includes/1-create-database.md)]
18+
Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,16 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.secure-your-azure-sql-database.2-restrict-network-access
3-
metadata:
4-
title: Exercise - Restrict network access
5-
description: Learn how to restrict network access to your Azure SQL Server database.
6-
ms.date: 11/07/2023
7-
author: VanMSFT
8-
ms.author: vanto
9-
manager: jroth
10-
ms.topic: unit
11-
interactive: bash
12-
azureSandbox: true
13-
title: Exercise - Restrict network access
14-
durationInMinutes: 25
15-
content: |
16-
[!include[](includes/2-restrict-network-access.md)]
1+
### YamlMime:ModuleUnit
2+
uid: learn.secure-your-azure-sql-database.2-restrict-network-access
3+
metadata:
4+
title: Exercise - Restrict network access
5+
description: Learn how to restrict network access to your Azure SQL Server database.
6+
ms.date: 05/08/2025
7+
author: VanMSFT
8+
ms.author: vanto
9+
manager: jroth
10+
ms.topic: unit
11+
interactive: bash
12+
azureSandbox: true
13+
title: Exercise - Restrict network access
14+
durationInMinutes: 25
15+
content: |
16+
[!include[](includes/2-restrict-network-access.md)]
Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,16 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.secure-your-azure-sql-database.3-manage-authentication
3-
metadata:
4-
title: Exercise - Control who can access your database
5-
description: Learn to control access to the database by creating users with deliberately reduced access.
6-
ms.date: 11/07/2023
7-
author: VanMSFT
8-
ms.author: vanto
9-
manager: jroth
10-
ms.topic: unit
11-
interactive: bash
12-
azureSandbox: true
13-
title: Exercise - Control who can access your database
14-
durationInMinutes: 6
15-
content: |
16-
[!include[](includes/3-manage-authentication.md)]
1+
### YamlMime:ModuleUnit
2+
uid: learn.secure-your-azure-sql-database.3-manage-authentication
3+
metadata:
4+
title: Exercise - Control who can access your database
5+
description: Learn to control access to the database by creating users with deliberately reduced access.
6+
ms.date: 05/08/2025
7+
author: VanMSFT
8+
ms.author: vanto
9+
manager: jroth
10+
ms.topic: unit
11+
interactive: bash
12+
azureSandbox: true
13+
title: Exercise - Control who can access your database
14+
durationInMinutes: 6
15+
content: |
16+
[!include[](includes/3-manage-authentication.md)]
Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,16 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.secure-your-azure-sql-database.4-data-security
3-
metadata:
4-
title: Exercise - Secure your data in transit, at rest, and on display
5-
description: Data security
6-
ms.date: 11/07/2023
7-
author: VanMSFT
8-
ms.author: vanto
9-
manager: jroth
10-
ms.topic: unit
11-
interactive: bash
12-
azureSandbox: true
13-
title: Exercise - Secure your data in transit, at rest, and on display
14-
durationInMinutes: 8
15-
content: |
16-
[!include[](includes/4-data-security.md)]
1+
### YamlMime:ModuleUnit
2+
uid: learn.secure-your-azure-sql-database.4-data-security
3+
metadata:
4+
title: Exercise - Secure your data in transit, at rest, and on display
5+
description: Data security
6+
ms.date: 05/08/2025
7+
author: VanMSFT
8+
ms.author: vanto
9+
manager: jroth
10+
ms.topic: unit
11+
interactive: bash
12+
azureSandbox: true
13+
title: Exercise - Secure your data in transit, at rest, and on display
14+
durationInMinutes: 8
15+
content: |
16+
[!include[](includes/4-data-security.md)]
Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,16 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.secure-your-azure-sql-database.5-monitor-your-database
3-
metadata:
4-
title: Exercise - Monitor your database
5-
description: Learn to audit operations on your database and use that information with Advanced Threat Monitoring to report security risks and threats.
6-
ms.date: 11/07/2023
7-
author: VanMSFT
8-
ms.author: vanto
9-
manager: jroth
10-
ms.topic: unit
11-
interactive: bash
12-
azureSandbox: true
13-
title: Exercise - Monitor your database
14-
durationInMinutes: 8
15-
content: |
16-
[!include[](includes/5-monitor-your-database.md)]
1+
### YamlMime:ModuleUnit
2+
uid: learn.secure-your-azure-sql-database.5-monitor-your-database
3+
metadata:
4+
title: Exercise - Monitor your database
5+
description: Learn to audit operations on your database and use that information with Advanced Threat Monitoring to report security risks and threats.
6+
ms.date: 05/08/2025
7+
author: VanMSFT
8+
ms.author: vanto
9+
manager: jroth
10+
ms.topic: unit
11+
interactive: bash
12+
azureSandbox: true
13+
title: Exercise - Monitor your database
14+
durationInMinutes: 8
15+
content: |
16+
[!include[](includes/5-monitor-your-database.md)]
Lines changed: 61 additions & 61 deletions
Original file line numberDiff line numberDiff line change
@@ -1,61 +1,61 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.secure-your-azure-sql-database.6-knowledge-check
3-
metadata:
4-
title: Module assessment
5-
description: Test your knowledge
6-
ms.date: 11/07/2023
7-
author: VanMSFT
8-
ms.author: vanto
9-
manager: jroth
10-
ms.topic: unit
11-
title: Module assessment
12-
durationInMinutes: 5
13-
content: |
14-
[!include[](includes/6-knowledge-check.md)]
15-
quiz:
16-
title: Check your knowledge
17-
questions:
18-
19-
- content: 'Which of the following is the most efficient way to secure a database to allow only access from a VNet while restricting access from the internet?'
20-
choices:
21-
- content: An allow access to Azure services rule
22-
isCorrect: false
23-
- content: A server-level IP address rule
24-
isCorrect: false
25-
- content: A server-level virtual network rule
26-
isCorrect: true
27-
explanation: A server-level virtual network rule will allow you to allow connectivity from specific Azure VNet subnets, and will block access from the internet. This is the most efficient manner to secure this configuration.
28-
- content: A database-level IP address rule
29-
isCorrect: false
30-
31-
- content: 'A mask has been applied to a column in the database that holds a user’s email address, [email protected]. From the list of options, what would the mask display when a database administrator account accesses user data?'
32-
choices:
33-
- content: [email protected]
34-
isCorrect: false
35-
- content: [email protected]
36-
isCorrect: false
37-
- content: [email protected]
38-
isCorrect: true
39-
explanation: When database administrator accounts access data that have a mask applied, the mask is removed, and the original data is visible.
40-
- content: Data not available
41-
isCorrect: false
42-
43-
- content: 'Transparent Data Encryption will encrypt which database files?'
44-
choices:
45-
- content: Database files only
46-
isCorrect: false
47-
- content: Log files and backup files only
48-
isCorrect: false
49-
- content: Backup files only
50-
isCorrect: false
51-
- content: Database files, log files, and backup files
52-
isCorrect: true
53-
explanation: Transparent Data Encryption encrypts all database, log, and backup files. When new Azure SQL databases are created, Transparent Data Encryption will be enabled by default.
54-
55-
- content: 'Is encrypted communication turned on automatically when connecting to an Azure SQL Server?'
56-
choices:
57-
- content: "Yes"
58-
isCorrect: true
59-
explanation: Azure SQL Database enforces encryption (SSL/TLS) at all times for all connections.
60-
- content: "No"
61-
isCorrect: false
1+
### YamlMime:ModuleUnit
2+
uid: learn.secure-your-azure-sql-database.6-knowledge-check
3+
metadata:
4+
title: Module assessment
5+
description: Test your knowledge
6+
ms.date: 05/08/2025
7+
author: VanMSFT
8+
ms.author: vanto
9+
manager: jroth
10+
ms.topic: unit
11+
title: Module assessment
12+
durationInMinutes: 5
13+
content: |
14+
[!include[](includes/6-knowledge-check.md)]
15+
quiz:
16+
title: Check your knowledge
17+
questions:
18+
19+
- content: 'Which of the following is the most efficient way to secure a database to allow only access from a VNet while restricting access from the internet?'
20+
choices:
21+
- content: An allow access to Azure services rule
22+
isCorrect: false
23+
- content: A server-level IP address rule
24+
isCorrect: false
25+
- content: A server-level virtual network rule
26+
isCorrect: true
27+
explanation: A server-level virtual network rule will allow you to allow connectivity from specific Azure VNet subnets, and will block access from the internet. This is the most efficient manner to secure this configuration.
28+
- content: A database-level IP address rule
29+
isCorrect: false
30+
31+
- content: 'A mask has been applied to a column in the database that holds a user’s email address, [email protected]. From the list of options, what would the mask display when a database administrator account accesses user data?'
32+
choices:
33+
- content: [email protected]
34+
isCorrect: false
35+
- content: [email protected]
36+
isCorrect: false
37+
- content: [email protected]
38+
isCorrect: true
39+
explanation: When database administrator accounts access data that have a mask applied, the mask is removed, and the original data is visible.
40+
- content: Data not available
41+
isCorrect: false
42+
43+
- content: 'Transparent Data Encryption will encrypt which database files?'
44+
choices:
45+
- content: Database files only
46+
isCorrect: false
47+
- content: Log files and backup files only
48+
isCorrect: false
49+
- content: Backup files only
50+
isCorrect: false
51+
- content: Database files, log files, and backup files
52+
isCorrect: true
53+
explanation: Transparent Data Encryption encrypts all database, log, and backup files. When new Azure SQL databases are created, Transparent Data Encryption will be enabled by default.
54+
55+
- content: 'Is encrypted communication turned on automatically when connecting to an Azure SQL Server?'
56+
choices:
57+
- content: "Yes"
58+
isCorrect: true
59+
explanation: Azure SQL Database enforces encryption (SSL/TLS) at all times for all connections.
60+
- content: "No"
61+
isCorrect: false
Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.secure-your-azure-sql-database.7-summary
3-
metadata:
4-
title: Summary
5-
description: Summary
6-
ms.date: 11/07/2023
7-
author: VanMSFT
8-
ms.author: vanto
9-
manager: jroth
10-
ms.topic: unit
11-
title: Summary
12-
durationInMinutes: 3
13-
content: |
14-
[!include[](includes/7-summary.md)]
1+
### YamlMime:ModuleUnit
2+
uid: learn.secure-your-azure-sql-database.7-summary
3+
metadata:
4+
title: Summary
5+
description: Summary
6+
ms.date: 05/08/2025
7+
author: VanMSFT
8+
ms.author: vanto
9+
manager: jroth
10+
ms.topic: unit
11+
title: Summary
12+
durationInMinutes: 3
13+
content: |
14+
[!include[](includes/7-summary.md)]

0 commit comments

Comments
 (0)