AZ-500 · Question #294
You have an app that uses an Azure SQL database. You need to be notified if a SQL injection attack is launched against the database. What should you do?
The correct answer is C. Enable Azure Defender for SQL for the database. To detect and be notified of SQL injection attacks against an Azure SQL database, you should enable Azure Defender for SQL.
Question
Options
- AModify the Diagnostics settings for the database.
- BDeploy the SQL Health Check solution in Azure Monitor.
- CEnable Azure Defender for SQL for the database.
- DEnable server-level auditing for the database.
How the community answered
(28 responses)- A4% (1)
- C93% (26)
- D4% (1)
Why each option
To detect and be notified of SQL injection attacks against an Azure SQL database, you should enable Azure Defender for SQL.
Modifying Diagnostics settings collects metrics and logs, but does not inherently provide real-time threat detection and alerting for SQL injection attacks.
The SQL Health Check solution in Azure Monitor is primarily for performance optimization and configuration best practices, not for active security threat detection.
Azure Defender for SQL, part of Microsoft Defender for Cloud, provides advanced threat protection for Azure SQL databases. It continuously monitors for suspicious activities like SQL injection attempts, brute-force attacks, and anomalous database access patterns, and automatically generates security alerts upon detection.
Enabling server-level auditing records database events, which can be useful for forensics, but it does not actively detect or notify about SQL injection attacks.
Concept tested: Azure SQL database threat protection, SQL injection detection
Source: https://learn.microsoft.com/en-us/azure/azure-sql/database/azure-defender-for-sql?view=azuresql
Community Discussion
No community discussion yet for this question.