You work as the network database administrator at MiracleInfocom .com. The MiracleInfocom .com network consists of a single Active Directory domain named MiracleInfocom .com. All servers on the MiracleInfocom .com network run Windows Server 2003 and all client computers run Windows XP Professional. The MiracleInfocom .com network contains a Microsoft SQL Server 2005 database server named MiracleInfocom -DB01 which you administer. MiracleInfocom-DB01 includes a default instance and two named instances of SQL Server 2005. The MiracleInfocom-DB01 will only be accessed by users in the Finance department. All computers in the Finance department are located in the same subnet. The MiracleInfocom .com network financial application uses instance names to connect to MiracleInfocom -DB01. The application is not configurable. During the course of the day you are informed about a worm attack that accesses a computer using port 1434. You are required to protect MiracleInfocom -DB01 from the worm. What should you do?
A. The HideInstance flag should be set on all instances of SQL Server.
B. The Windows Firewall on MiracleInfocom -DB01 should be configured to block port 1434.
C. The SQL Server Browser service should be disabled.
D. An Internet Protocol Security (IPSeC) policy should be enabled on the database server.
Answer:D
You work as the network database administrator at MiracleInfocom .com. The MiracleInfocom .com network consists of a single Active Directory domain named MiracleInfocom .com. All servers on the MiracleInfocom .com network run Windows Server 2003 and all client computers run Windows XP Professional. The MiracleInfocom .com network contains a Microsoft SQL Server 2005 database server named MiracleInfocom -DB01 which you administer. MiracleInfocom-DB01 includes a default instance and two named instances of SQL Server 2005. The MiracleInfocom-DB01 will only be accessed by users in the Finance department. All computers in the Finance department are located in the same subnet. The MiracleInfocom .com network financial application uses instance names to connect to MiracleInfocom -DB01. The application is not configurable. During the course of the day you are informed about a worm attack that accesses a computer using port 1434. You are required to protect MiracleInfocom -DB01 from the worm. What should you do?
A. The HideInstance flag should be set on all instances of SQL Server. B. The Windows Firewall on MiracleInfocom -DB01 should be configured to block port 1434. C. The SQL Server Browser service should be disabled. D. An Internet Protocol Security (IPSeC) policy should be enabled on the database server.