Microsoft
SC-100 · Question #250
You have an on-premises server that runs Windows Server and contains a Microsoft SQL Server database named DB1. You plan to migrate DB1 to Azure. You need to recommend an encrypted Azure database solu
Sign in or unlock SC-100 to reveal the answer and full explanation for question #250. The question stem and answer options stay visible for context.
Design security solutions for applications and data
Question
You have an on-premises server that runs Windows Server and contains a Microsoft SQL Server database named DB1. You plan to migrate DB1 to Azure. You need to recommend an encrypted Azure database solution that meets the following requirements:
- Minimizes the risks of malware that uses elevated privileges to
access sensitive data
- Prevents database administrators from accessing sensitive data
- Enables pattern matching for server-side database operations
- Supports Microsoft Azure Attestation
- Uses hardware-based encryption
What should you include in the recommendation?
Options
- ASQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves
- BAzure SQL Database with virtualization-based security (VBS) enclaves
- CAzure SQL Managed Instance that has Always Encrypted configured
- DAzure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves
Unlock SC-100 to see the answer
You've previewed enough free SC-100 questions. Unlock SC-100 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Azure SQL Database Security#Confidential Computing#Always Encrypted with Secure Enclaves#Data Encryption