nerdexam
Microsoft

AZ-500 · Question #294

You have an app that uses an Azure SQL database. You need to be notified if a SQL injection attack is launched against the database. What should you do?

The correct answer is C. Enable Azure Defender for SQL for the database. To detect and be notified of SQL injection attacks against an Azure SQL database, you should enable Azure Defender for SQL.

Submitted by hassan_iq· Mar 6, 2026Secure compute, storage, and databases

Question

You have an app that uses an Azure SQL database. You need to be notified if a SQL injection attack is launched against the database. What should you do?

Options

  • AModify the Diagnostics settings for the database.
  • BDeploy the SQL Health Check solution in Azure Monitor.
  • CEnable Azure Defender for SQL for the database.
  • DEnable server-level auditing for the database.

How the community answered

(28 responses)
  • A
    4% (1)
  • C
    93% (26)
  • D
    4% (1)

Why each option

To detect and be notified of SQL injection attacks against an Azure SQL database, you should enable Azure Defender for SQL.

AModify the Diagnostics settings for the database.

Modifying Diagnostics settings collects metrics and logs, but does not inherently provide real-time threat detection and alerting for SQL injection attacks.

BDeploy the SQL Health Check solution in Azure Monitor.

The SQL Health Check solution in Azure Monitor is primarily for performance optimization and configuration best practices, not for active security threat detection.

CEnable Azure Defender for SQL for the database.Correct

Azure Defender for SQL, part of Microsoft Defender for Cloud, provides advanced threat protection for Azure SQL databases. It continuously monitors for suspicious activities like SQL injection attempts, brute-force attacks, and anomalous database access patterns, and automatically generates security alerts upon detection.

DEnable server-level auditing for the database.

Enabling server-level auditing records database events, which can be useful for forensics, but it does not actively detect or notify about SQL injection attacks.

Concept tested: Azure SQL database threat protection, SQL injection detection

Source: https://learn.microsoft.com/en-us/azure/azure-sql/database/azure-defender-for-sql?view=azuresql

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice