Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Microsoft Exam SC-100 Topic 3 Question 60 Discussion

Actual exam question for Microsoft's SC-100 exam
Question #: 60
Topic #: 3
[All SC-100 Questions]

You have an on-premises server that runs Windows Server and contains a Microsoft SQL Server database named DB1.

You plan to migrate DB1 to Azure.

You need to recommend an encrypted Azure database solution that meets the following requirements:

* Minimizes the risks of malware that uses elevated privileges to access sensitive data

* Prevents database administrators from accessing sensitive data

* Enables pattern matching for server-side database operations

* Supports Microsoft Azure Attestation

* Uses hardware-based encryption

What should you include in the recommendation?

Show Suggested Answer Hide Answer
Suggested Answer: D

Contribute your Thoughts:

Rima
1 months ago
I think A) SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves is the best choice for this scenario.
upvoted 0 times
...
Krissy
2 months ago
I'm leaning towards C) Azure SQL Managed Instance that has Always Encrypted configured, it seems like a secure option.
upvoted 0 times
...
Eura
2 months ago
I disagree, I believe the correct answer is D) Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves.
upvoted 0 times
...
Detra
2 months ago
Wow, this question has some serious security requirements. It's like the database needs a kevlar vest and a bodyguard. But hey, at least the data will be safer than a diamond in Fort Knox.
upvoted 0 times
Shoshana
11 days ago
D) Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves
upvoted 0 times
...
Oretha
17 days ago
C) Azure SQL Managed Instance that has Always Encrypted configured
upvoted 0 times
...
Marlon
26 days ago
B) Azure SQL Database with virtualization-based security (VBS) enclaves
upvoted 0 times
...
Rosalind
29 days ago
A) SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves
upvoted 0 times
...
...
Kindra
2 months ago
I think Azure SQL Managed Instance with Always Encrypted is also a good choice. It's a simpler solution and might be more familiar to the organization. Plus, who knows, maybe the DBA is a magician and can still access the data even with the Intel SGX enclaves.
upvoted 0 times
...
Ayesha
2 months ago
Hmm, I'm not sure about the Intel SGX enclaves. Wasn't there some security vulnerability discovered in them recently? Better do some more research before recommending that option.
upvoted 0 times
Catina
1 months ago
B) Azure SQL Database with virtualization-based security (VBS) enclaves
upvoted 0 times
...
Gilberto
2 months ago
A) SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves
upvoted 0 times
...
...
Talia
2 months ago
I think the answer is B) Azure SQL Database with virtualization-based security (VBS) enclaves.
upvoted 0 times
...
Mitsue
2 months ago
I agree, the Intel SGX enclaves in Azure SQL Database are perfect for this scenario. They not only protect the data from malware but also prevent DBAs from accessing it, which is a great security feature.
upvoted 0 times
Joana
2 months ago
User 2
upvoted 0 times
...
Willie
2 months ago
User 1
upvoted 0 times
...
...
Sang
3 months ago
Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves seems like the best option here. It meets all the requirements and provides hardware-based encryption, which is crucial for protecting sensitive data.
upvoted 0 times
Clorinda
2 months ago
Azure SQL Managed Instance that has Always Encrypted configured might be a good option as well, but it doesn't provide hardware-based encryption like Intel SGX enclaves.
upvoted 0 times
...
Rodrigo
2 months ago
I think SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves could also be a good choice.
upvoted 0 times
...
Adell
2 months ago
I agree, Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves is the best option for this scenario.
upvoted 0 times
...
...

Save Cancel