Microsoft Exam SC-100 Topic 3 Question 39 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 39
Topic #: 3

[All SC-100 Questions]

You have an on-premises server that runs Windows Server and contains a Microsoft SQL Server database named DB1.

You plan to migrate DB1 to Azure.

You need to recommend an encrypted Azure database solution that meets the following requirements:

* Minimizes the risks of malware that uses elevated privileges to access sensitive data

* Prevents database administrators from accessing sensitive data

* Enables pattern matching for server-side database operations

* Supports Microsoft Azure Attestation

* Uses hardware-based encryption

What should you include in the recommendation?

ASQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves

BAzure SQL Database with virtualization-based security (VBS) enclaves

CAzure SQL Managed Instance that has Always Encrypted configured

DAzure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves

Show Suggested Answer

Suggested Answer: D

by Jamey at Apr 21, 2024, 04:10 AM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Yoko

6 months ago

I believe option A, SQL Server on Azure Virtual Machines with VBS enclaves, is the best choice for preventing access from database administrators.

upvoted 0 times

...

Nan

6 months ago

That's true, but Always Encrypted in option C seems more appropriate for our data security requirements.

upvoted 0 times

...

Fredric

6 months ago

But what about option D, Azure SQL Database with Intel SGX enclaves? It also offers hardware-based encryption.

upvoted 0 times

...

Keith

7 months ago

I agree with that option provides secure encryption for sensitive data.

upvoted 0 times

...

Nan

7 months ago

I think we should go with Azure SQL Managed Instance with Always Encrypted.

upvoted 0 times

...

Theodora

8 months ago

I have heard that Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves could also be a good choice.

upvoted 0 times

...

Chau

8 months ago

What about Azure SQL Managed Instance that has Always Encrypted configured?

upvoted 0 times

...

Otis

8 months ago

I'm not so sure about that, I believe Azure SQL Database with virtualization-based security (VBS) enclaves would be a better option.

upvoted 0 times

Miss

8 months ago

B) Azure SQL Database with virtualization-based security (VBS) enclaves

upvoted 0 times

...

Wilda

8 months ago

Yes, Azure SQL Database with VBS enclaves meets the criteria for minimizing malware risks and preventing access to sensitive data by administrators.

upvoted 0 times

...

Carlton

8 months ago

B) Azure SQL Database with virtualization-based security (VBS) enclaves

upvoted 0 times

...

Yoko

8 months ago

It's important to choose a solution that aligns with the specific requirements. SQL Server on Azure VMs with VBS enclaves does seem like a strong option.

upvoted 0 times

...

Ivan

8 months ago

B) Azure SQL Database with virtualization-based security (VBS) enclaves

upvoted 0 times

...

Alton

8 months ago

A) SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves

upvoted 0 times

...

Katie

8 months ago

I think the recommendation should include SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves.

upvoted 0 times

...