Azure Defender for SQL is enabled on SQL1 with all threat detection types turned on. Which of the following actions will Defender for SQL flag as a threat?

Azure Defender for SQL detects anomalous activities indicating potential threats to your database. Attempting to sign in with "SELECT FROM table1" is a classic example of SQL injection, where an attacker tries to manipulate input fields to execute unauthorized SQL commands. Defender for SQL is designed to identify such malicious patterns, flagging it as a potential threat. Updating more than 50% of records or deleting more than 100 records, while potentially unusual, are legitimate database operations that, without other suspicious indicators, are not inherently malicious and would not typically trigger a Defender for SQL alert. Adding a user to the dbowner role is a privileged but standard administrative action, not a threat detection event.