Microsoft Exam SC-100 Topic 1 Question 48 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 48
Topic #: 1

[All SC-100 Questions]

You have an on-premises server that runs Windows Server and contains a Microsoft SQL Server database named DB1.

You plan to migrate DB1 to Azure.

You need to recommend an encrypted Azure database solution that meets the following requirements:

* Minimizes the risks of malware that uses elevated privileges to access sensitive data

* Prevents database administrators from accessing sensitive data

* Enables pattern matching for server-side database operations

* Supports Microsoft Azure Attestation

* Uses hardware-based encryption

What should you include in the recommendation?

ASQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves

BAzure SQL Database with virtualization-based security (VBS) enclaves

CAzure SQL Managed Instance that has Always Encrypted configured

DAzure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves

Show Suggested Answer

Suggested Answer: D

by Carmela at Aug 08, 2024, 07:25 AM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Wilda

6 months ago

I like the idea of the VBS enclaves in option A or B. That extra layer of hardware-based security could really help mitigate the malware risk.

upvoted 0 times

...

Yuki

7 months ago

Ha! I bet the database admins will be fuming if they can't access the data. Serves them right for trying to snoop around! But option C does sound like the right pick.

upvoted 0 times

Wendell

6 months ago

Yeah, that option sounds like it would prevent the admins from accessing sensitive data.

upvoted 0 times

...

Caprice

6 months ago

Option C) Azure SQL Managed Instance that has Always Encrypted configured

upvoted 0 times

...

Viola

7 months ago

C seems like the best choice here. Always Encrypted should meet the requirements for protecting sensitive data and preventing admin access.

upvoted 0 times

Mitsue

6 months ago

I agree, C is a good option. It provides the necessary encryption and access control for the database.

upvoted 0 times

...

Malcom

6 months ago

C seems like the best choice here. Always Encrypted should meet the requirements for protecting sensitive data and preventing admin access.

upvoted 0 times

...

Kassandra

7 months ago

I agree with Shenika, option A fulfills all the requirements and provides hardware-based encryption.

upvoted 0 times

...

Shenika

7 months ago

But option D does not support Microsoft Azure Attestation, which is a requirement.

upvoted 0 times

...

Jesusita

7 months ago

I disagree, I believe option D) Azure SQL Database with Intel SGX enclaves is the best choice.

upvoted 0 times

...

Shenika

7 months ago

I think we should go with option A) SQL Server on Azure Virtual Machines with VBS enclaves.

upvoted 0 times

...

Judy

7 months ago

Option D looks promising with the Intel SGX enclaves, but I'm not sure if it supports Azure Attestation. I'll need to research that further.

upvoted 0 times

Jani

6 months ago

Before making a decision, let's double-check if option D meets all the requirements for the encrypted Azure database solution.

upvoted 0 times

...

Doretha

6 months ago

I agree, option D seems like a strong choice with hardware-based encryption. Let's verify the Azure Attestation compatibility.

upvoted 0 times

...

Virgina

6 months ago

I think option D does support Azure Attestation. It's worth looking into the details to confirm.

upvoted 0 times

...

Dannette

7 months ago

Option D looks promising with the Intel SGX enclaves, but I'm not sure if it supports Azure Attestation. I'll need to research that further.

upvoted 0 times

...

Cyril

7 months ago

I see your point, Alysa. However, I think SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves could also be a strong contender.

upvoted 0 times

...