nerdexam
Microsoft

SC-100 · Question #19

Your company has on-premises Microsoft SQL Server databases. The company plans to move the databases to Azure. You need to recommend a secure architecture for the databases that will minimize…

The correct answer is C. Azure SQL Database. The correct answer is Azure SQL Database (C). It is a fully managed PaaS service where Microsoft handles all patching, updates, and infrastructure maintenance, minimizing operational overhead. Azure SQL Database natively supports dynamic data masking to hide sensitive data from…

Design security solutions for applications and data

Question

Your company has on-premises Microsoft SQL Server databases. The company plans to move the databases to Azure. You need to recommend a secure architecture for the databases that will minimize operational requirements for patching and protect sensitive data by using dynamic data masking. The solution must minimize costs. What should you include in the recommendation?

Options

  • AAzure SQL Managed Instance
  • BAzure Synapse Analytics dedicated SQL pools
  • CAzure SQL Database
  • DSQL Server on Azure Virtual Machines

How the community answered

(55 responses)
  • A
    5% (3)
  • B
    2% (1)
  • C
    82% (45)
  • D
    11% (6)

Explanation

The correct answer is Azure SQL Database (C). It is a fully managed PaaS service where Microsoft handles all patching, updates, and infrastructure maintenance, minimizing operational overhead. Azure SQL Database natively supports dynamic data masking to hide sensitive data from unauthorized users. It is also the lowest-cost option among the choices for typical OLTP workloads. Azure SQL Managed Instance (A) also supports dynamic data masking and is fully managed, but is more expensive and better suited for lift-and-shift migrations requiring near 100% SQL Server compatibility. Azure Synapse Analytics dedicated SQL pools (B) are designed for large-scale analytics, not OLTP, and are costly. SQL Server on Azure Virtual Machines (D) is IaaS, requiring the customer to manage patching, which contradicts the requirement.

Topics

#Azure SQL Database#PaaS#Dynamic Data Masking#Database Migration

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice