Microsoft Exam SC-100 Topic 9 Question 37 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 37
Topic #: 9

[All SC-100 Questions]

You have an on-premises server that runs Windows Server and contains a Microsoft SQL Server database named DB1.

You plan to migrate DB1 to Azure.

You need to recommend an encrypted Azure database solution that meets the following requirements:

* Minimizes the risks of malware that uses elevated privileges to access sensitive data

* Prevents database administrators from accessing sensitive data

* Enables pattern matching for server-side database operations

* Supports Microsoft Azure Attestation

* Uses hardware-based encryption

What should you include in the recommendation?

ASQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves

BAzure SQL Database with virtualization-based security (VBS) enclaves

CAzure SQL Managed Instance that has Always Encrypted configured

DAzure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves

Show Suggested Answer

Suggested Answer: D

by Kanisha at Mar 19, 2024, 05:58 PM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Salome

7 months ago

I've read that SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves is also a strong option.

upvoted 0 times

...

Shawn

7 months ago

I'm not sure. But I think Azure SQL Managed Instance that has Always Encrypted configured could be a good choice.

upvoted 0 times

...

Vanna

7 months ago

I disagree. I believe Azure SQL Database with virtualization-based security (VBS) enclaves would be a better option.

upvoted 0 times

...

Sunshine

7 months ago

I think we should go with Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves.

upvoted 0 times

...

I'm not so sure about that. Option C, Azure SQL Managed Instance with Always Encrypted, also looks promising. It provides the data protection we need, and it's a managed service, which could be easier to set up.

upvoted 0 times

...

Belen

8 months ago

Haha, I hear you! Though I guess that's why they call it a 'certification' exam - they want to make sure we really know our stuff.

upvoted 0 times

...

8 months ago

Hmm, this is a tricky one. I think the key here is to find an Azure database solution that meets all the requirements, including the hardware-based encryption and Azure Attestation support.

upvoted 0 times

...

Microsoft Exam SC-100 Topic 9 Question 37 Discussion

Contribute your Thoughts:

Salome

Shawn

Vanna

Sunshine

James

Belen

Monte

Daron

Katie

Evette

Jeffrey

Christiane