Skip to content

Commit cdc71aa

Browse files
wwlpublishwwlpublish
authored
pull base content,head:MicrosoftDocs:main,into:wwlpublishsync
2 parents ae7d0f7 + d4de03a commit cdc71aa

16 files changed

+266
-268
lines changed

‎learn-pr/azure/secure-your-azure-sql-database/0-introduction.yml

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.secure-your-azure-sql-database.0-introduction
3-
metadata:
4-
title: Introduction
5-
description: Introduction
6-
ms.date: 11/07/2023
7-
author: VanMSFT
8-
ms.author: vanto
9-
manager: jroth
10-
ms.topic: unit
11-
title: Introduction
12-
durationInMinutes: 2
13-
content: |
14-
[!include[](includes/0-introduction.md)]
1+
### YamlMime:ModuleUnit
2+
uid: learn.secure-your-azure-sql-database.0-introduction
3+
metadata:
4+
title: Introduction
5+
description: Introduction
6+
ms.date: 05/08/2025
7+
author: VanMSFT
8+
ms.author: vanto
9+
manager: jroth
10+
ms.topic: unit
11+
title: Introduction
12+
durationInMinutes: 2
13+
content: |
14+
[!include[](includes/0-introduction.md)]

‎learn-pr/azure/secure-your-azure-sql-database/1-create-database.yml

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -1,18 +1,18 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.secure-your-azure-sql-database.1-create-database
3-
metadata:
4-
title: Exercise - Set up sandbox environment
5-
description: Create an Azure SQL Database and a Linux VM for use throughout this module.
6-
ms.date: 11/07/2023
7-
author: VanMSFT
8-
ms.author: vanto
9-
manager: jroth
10-
ms.topic: unit
11-
ms.custom: linux-related-content
12-
interactive: bash
13-
azureSandbox: true
14-
title: Exercise - Set up sandbox environment
15-
durationInMinutes: 10
16-
content: |
17-
[!include[](includes/1-create-database.md)]
18-
1+
### YamlMime:ModuleUnit
2+
uid: learn.secure-your-azure-sql-database.1-create-database
3+
metadata:
4+
title: Exercise - Set up sandbox environment
5+
description: Create an Azure SQL Database and a Linux VM for use throughout this module.
6+
ms.date: 05/08/2025
7+
author: VanMSFT
8+
ms.author: vanto
9+
manager: jroth
10+
ms.topic: unit
11+
ms.custom: linux-related-content
12+
interactive: bash
13+
azureSandbox: true
14+
title: Exercise - Set up sandbox environment
15+
durationInMinutes: 10
16+
content: |
17+
[!include[](includes/1-create-database.md)]
18+

‎learn-pr/azure/secure-your-azure-sql-database/2-restrict-network-access.yml

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,16 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.secure-your-azure-sql-database.2-restrict-network-access
3-
metadata:
4-
title: Exercise - Restrict network access
5-
description: Learn how to restrict network access to your Azure SQL Server database.
6-
ms.date: 11/07/2023
7-
author: VanMSFT
8-
ms.author: vanto
9-
manager: jroth
10-
ms.topic: unit
11-
interactive: bash
12-
azureSandbox: true
13-
title: Exercise - Restrict network access
14-
durationInMinutes: 25
15-
content: |
16-
[!include[](includes/2-restrict-network-access.md)]
1+
### YamlMime:ModuleUnit
2+
uid: learn.secure-your-azure-sql-database.2-restrict-network-access
3+
metadata:
4+
title: Exercise - Restrict network access
5+
description: Learn how to restrict network access to your Azure SQL Server database.
6+
ms.date: 05/08/2025
7+
author: VanMSFT
8+
ms.author: vanto
9+
manager: jroth
10+
ms.topic: unit
11+
interactive: bash
12+
azureSandbox: true
13+
title: Exercise - Restrict network access
14+
durationInMinutes: 25
15+
content: |
16+
[!include[](includes/2-restrict-network-access.md)]

‎learn-pr/azure/secure-your-azure-sql-database/3-manage-authentication.yml

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,16 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.secure-your-azure-sql-database.3-manage-authentication
3-
metadata:
4-
title: Exercise - Control who can access your database
5-
description: Learn to control access to the database by creating users with deliberately reduced access.
6-
ms.date: 11/07/2023
7-
author: VanMSFT
8-
ms.author: vanto
9-
manager: jroth
10-
ms.topic: unit
11-
interactive: bash
12-
azureSandbox: true
13-
title: Exercise - Control who can access your database
14-
durationInMinutes: 6
15-
content: |
16-
[!include[](includes/3-manage-authentication.md)]
1+
### YamlMime:ModuleUnit
2+
uid: learn.secure-your-azure-sql-database.3-manage-authentication
3+
metadata:
4+
title: Exercise - Control who can access your database
5+
description: Learn to control access to the database by creating users with deliberately reduced access.
6+
ms.date: 05/08/2025
7+
author: VanMSFT
8+
ms.author: vanto
9+
manager: jroth
10+
ms.topic: unit
11+
interactive: bash
12+
azureSandbox: true
13+
title: Exercise - Control who can access your database
14+
durationInMinutes: 6
15+
content: |
16+
[!include[](includes/3-manage-authentication.md)]

‎learn-pr/azure/secure-your-azure-sql-database/4-data-security.yml

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,16 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.secure-your-azure-sql-database.4-data-security
3-
metadata:
4-
title: Exercise - Secure your data in transit, at rest, and on display
5-
description: Data security
6-
ms.date: 11/07/2023
7-
author: VanMSFT
8-
ms.author: vanto
9-
manager: jroth
10-
ms.topic: unit
11-
interactive: bash
12-
azureSandbox: true
13-
title: Exercise - Secure your data in transit, at rest, and on display
14-
durationInMinutes: 8
15-
content: |
16-
[!include[](includes/4-data-security.md)]
1+
### YamlMime:ModuleUnit
2+
uid: learn.secure-your-azure-sql-database.4-data-security
3+
metadata:
4+
title: Exercise - Secure your data in transit, at rest, and on display
5+
description: Data security
6+
ms.date: 05/08/2025
7+
author: VanMSFT
8+
ms.author: vanto
9+
manager: jroth
10+
ms.topic: unit
11+
interactive: bash
12+
azureSandbox: true
13+
title: Exercise - Secure your data in transit, at rest, and on display
14+
durationInMinutes: 8
15+
content: |
16+
[!include[](includes/4-data-security.md)]

‎learn-pr/azure/secure-your-azure-sql-database/5-monitor-your-database.yml

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,16 +1,16 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.secure-your-azure-sql-database.5-monitor-your-database
3-
metadata:
4-
title: Exercise - Monitor your database
5-
description: Learn to audit operations on your database and use that information with Advanced Threat Monitoring to report security risks and threats.
6-
ms.date: 11/07/2023
7-
author: VanMSFT
8-
ms.author: vanto
9-
manager: jroth
10-
ms.topic: unit
11-
interactive: bash
12-
azureSandbox: true
13-
title: Exercise - Monitor your database
14-
durationInMinutes: 8
15-
content: |
16-
[!include[](includes/5-monitor-your-database.md)]
1+
### YamlMime:ModuleUnit
2+
uid: learn.secure-your-azure-sql-database.5-monitor-your-database
3+
metadata:
4+
title: Exercise - Monitor your database
5+
description: Learn to audit operations on your database and use that information with Advanced Threat Monitoring to report security risks and threats.
6+
ms.date: 05/08/2025
7+
author: VanMSFT
8+
ms.author: vanto
9+
manager: jroth
10+
ms.topic: unit
11+
interactive: bash
12+
azureSandbox: true
13+
title: Exercise - Monitor your database
14+
durationInMinutes: 8
15+
content: |
16+
[!include[](includes/5-monitor-your-database.md)]

‎learn-pr/azure/secure-your-azure-sql-database/6-knowledge-check.yml

Lines changed: 61 additions & 61 deletions
Original file line numberDiff line numberDiff line change
@@ -1,61 +1,61 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.secure-your-azure-sql-database.6-knowledge-check
3-
metadata:
4-
title: Module assessment
5-
description: Test your knowledge
6-
ms.date: 11/07/2023
7-
author: VanMSFT
8-
ms.author: vanto
9-
manager: jroth
10-
ms.topic: unit
11-
title: Module assessment
12-
durationInMinutes: 5
13-
content: |
14-
[!include[](includes/6-knowledge-check.md)]
15-
quiz:
16-
title: Check your knowledge
17-
questions:
18-
19-
- content: 'Which of the following is the most efficient way to secure a database to allow only access from a VNet while restricting access from the internet?'
20-
choices:
21-
- content: An allow access to Azure services rule
22-
isCorrect: false
23-
- content: A server-level IP address rule
24-
isCorrect: false
25-
- content: A server-level virtual network rule
26-
isCorrect: true
27-
explanation: A server-level virtual network rule will allow you to allow connectivity from specific Azure VNet subnets, and will block access from the internet. This is the most efficient manner to secure this configuration.
28-
- content: A database-level IP address rule
29-
isCorrect: false
30-
31-
- content: 'A mask has been applied to a column in the database that holds a user’s email address, [email protected]. From the list of options, what would the mask display when a database administrator account accesses user data?'
32-
choices:
33-
- content: [email protected]
34-
isCorrect: false
35-
- content: [email protected]
36-
isCorrect: false
37-
- content: [email protected]
38-
isCorrect: true
39-
explanation: When database administrator accounts access data that have a mask applied, the mask is removed, and the original data is visible.
40-
- content: Data not available
41-
isCorrect: false
42-
43-
- content: 'Transparent Data Encryption will encrypt which database files?'
44-
choices:
45-
- content: Database files only
46-
isCorrect: false
47-
- content: Log files and backup files only
48-
isCorrect: false
49-
- content: Backup files only
50-
isCorrect: false
51-
- content: Database files, log files, and backup files
52-
isCorrect: true
53-
explanation: Transparent Data Encryption encrypts all database, log, and backup files. When new Azure SQL databases are created, Transparent Data Encryption will be enabled by default.
54-
55-
- content: 'Is encrypted communication turned on automatically when connecting to an Azure SQL Server?'
56-
choices:
57-
- content: "Yes"
58-
isCorrect: true
59-
explanation: Azure SQL Database enforces encryption (SSL/TLS) at all times for all connections.
60-
- content: "No"
61-
isCorrect: false
1+
### YamlMime:ModuleUnit
2+
uid: learn.secure-your-azure-sql-database.6-knowledge-check
3+
metadata:
4+
title: Module assessment
5+
description: Test your knowledge
6+
ms.date: 05/08/2025
7+
author: VanMSFT
8+
ms.author: vanto
9+
manager: jroth
10+
ms.topic: unit
11+
title: Module assessment
12+
durationInMinutes: 5
13+
content: |
14+
[!include[](includes/6-knowledge-check.md)]
15+
quiz:
16+
title: Check your knowledge
17+
questions:
18+
19+
- content: 'Which of the following is the most efficient way to secure a database to allow only access from a VNet while restricting access from the internet?'
20+
choices:
21+
- content: An allow access to Azure services rule
22+
isCorrect: false
23+
- content: A server-level IP address rule
24+
isCorrect: false
25+
- content: A server-level virtual network rule
26+
isCorrect: true
27+
explanation: A server-level virtual network rule will allow you to allow connectivity from specific Azure VNet subnets and will block access from the internet. This is the most efficient manner to secure this configuration.
28+
- content: A database-level IP address rule
29+
isCorrect: false
30+
31+
- content: 'A mask has been applied to a column in the database that holds a user’s email address, [email protected]. From the list of options, what would the mask display when a database administrator account accesses user data?'
32+
choices:
33+
- content: [email protected]
34+
isCorrect: false
35+
- content: [email protected]
36+
isCorrect: false
37+
- content: [email protected]
38+
isCorrect: true
39+
explanation: When database administrator accounts access data that have a mask applied, the mask is removed, and the original data is visible.
40+
- content: Data not available
41+
isCorrect: false
42+
43+
- content: 'Transparent Data Encryption will encrypt which database files?'
44+
choices:
45+
- content: Database files only
46+
isCorrect: false
47+
- content: Log files and backup files only
48+
isCorrect: false
49+
- content: Backup files only
50+
isCorrect: false
51+
- content: Database files, log files, and backup files
52+
isCorrect: true
53+
explanation: Transparent Data Encryption encrypts all database, log, and backup files. When new Azure SQL databases are created, Transparent Data Encryption will be enabled by default.
54+
55+
- content: 'Is encrypted communication turned on automatically when connecting to an Azure SQL Server?'
56+
choices:
57+
- content: "Yes"
58+
isCorrect: true
59+
explanation: Azure SQL Database enforces encryption (SSL/TLS) at all times for all connections.
60+
- content: "No"
61+
isCorrect: false

‎learn-pr/azure/secure-your-azure-sql-database/7-summary.yml

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
1-
### YamlMime:ModuleUnit
2-
uid: learn.secure-your-azure-sql-database.7-summary
3-
metadata:
4-
title: Summary
5-
description: Summary
6-
ms.date: 11/07/2023
7-
author: VanMSFT
8-
ms.author: vanto
9-
manager: jroth
10-
ms.topic: unit
11-
title: Summary
12-
durationInMinutes: 3
13-
content: |
14-
[!include[](includes/7-summary.md)]
1+
### YamlMime:ModuleUnit
2+
uid: learn.secure-your-azure-sql-database.7-summary
3+
metadata:
4+
title: Summary
5+
description: Summary
6+
ms.date: 05/08/2025
7+
author: VanMSFT
8+
ms.author: vanto
9+
manager: jroth
10+
ms.topic: unit
11+
title: Summary
12+
durationInMinutes: 3
13+
content: |
14+
[!include[](includes/7-summary.md)]

‎learn-pr/azure/secure-your-azure-sql-database/includes/0-introduction.md

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -8,9 +8,9 @@ Azure SQL Database is a great service for the storage of relational data. There
88

99
## Learning objectives
1010

11-
In this module, you will:
11+
In this module, you'll:
1212

13-
- Control network access to your Azure SQL Database using firewall rules
14-
- Control user access to your Azure SQL Database using authentication and authorization
15-
- Protect your data in transit and at rest
16-
- Audit and monitor your Azure SQL Database for access violations
13+
- Control network access to your Azure SQL Database using firewall rules.
14+
- Control user access to your Azure SQL Database using authentication and authorization.
15+
- Protect your data in transit and at rest.
16+
- Audit and monitor your Azure SQL Database for access violations.

‎learn-pr/azure/secure-your-azure-sql-database/includes/1-create-database.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ In this unit, you set up the resources that you use throughout this module. Envi
5151

5252
## Create and configure a Linux virtual machine
5353

54-
Create the Linux VM that to use through some examples.
54+
Create the Linux VM to use through some examples.
5555

5656
1. Run the following command to create the VM. This command might take several minutes to complete.
5757

@@ -90,7 +90,7 @@ Create the Linux VM that to use through some examples.
9090
Where `nnn.nnn.nnn.nnn` is the value from the `publicIpAddress` output in the previous step.
9191

9292
> [!NOTE]
93-
> Two things to note. First, you don't need a password because you generated an SSH key pair as part of the VM creation. Second, on the first shell connection into the VM, you are prompted about the authenticity of the host. This occurs because you are connecting to an IP address instead of a host name. Answering _yes_ saves the IP address as a valid host for connection and allows the connection to proceed.
93+
> Two things to note. First, you don't need a password because you generated an SSH key pair as part of the VM creation. Second, on the first shell connection into the VM, you're prompted about the authenticity of the host. This occurs because you're connecting to an IP address instead of a host name. Answering _yes_ saves the IP address as a valid host for connection and allows the connection to proceed.
9494
9595
1. Finish things by installing mssql-tools on the Linux VM so you can connect to your database through sqlcmd.
9696

0 commit comments

Comments
 (0)