Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft Exam SC-100 Topic 1 Question 48 Discussion

Actual exam question for Microsoft's SC-100 exam
Question #: 48
Topic #: 1
[All SC-100 Questions]

You have an on-premises server that runs Windows Server and contains a Microsoft SQL Server database named DB1.

You plan to migrate DB1 to Azure.

You need to recommend an encrypted Azure database solution that meets the following requirements:

* Minimizes the risks of malware that uses elevated privileges to access sensitive data

* Prevents database administrators from accessing sensitive data

* Enables pattern matching for server-side database operations

* Supports Microsoft Azure Attestation

* Uses hardware-based encryption

What should you include in the recommendation?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Carmela at Aug 08, 2024, 07:25 AM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Wilda
15 days ago
I like the idea of the VBS enclaves in option A or B. That extra layer of hardware-based security could really help mitigate the malware risk.
upvoted 0 times
...
Yuki
16 days ago
Ha! I bet the database admins will be fuming if they can't access the data. Serves them right for trying to snoop around! But option C does sound like the right pick.
upvoted 0 times
...
Viola
20 days ago
C seems like the best choice here. Always Encrypted should meet the requirements for protecting sensitive data and preventing admin access.
upvoted 0 times
Malcom
10 days ago
C seems like the best choice here. Always Encrypted should meet the requirements for protecting sensitive data and preventing admin access.
upvoted 0 times
...
...
Kassandra
20 days ago
I agree with Shenika, option A fulfills all the requirements and provides hardware-based encryption.
upvoted 0 times
...
Shenika
23 days ago
But option D does not support Microsoft Azure Attestation, which is a requirement.
upvoted 0 times
...
Jesusita
24 days ago
I disagree, I believe option D) Azure SQL Database with Intel SGX enclaves is the best choice.
upvoted 0 times
...
Shenika
29 days ago
I think we should go with option A) SQL Server on Azure Virtual Machines with VBS enclaves.
upvoted 0 times
...
Judy
1 months ago
Option D looks promising with the Intel SGX enclaves, but I'm not sure if it supports Azure Attestation. I'll need to research that further.
upvoted 0 times
Jani
3 days ago
Before making a decision, let's double-check if option D meets all the requirements for the encrypted Azure database solution.
upvoted 0 times
...
Doretha
8 days ago
I agree, option D seems like a strong choice with hardware-based encryption. Let's verify the Azure Attestation compatibility.
upvoted 0 times
...
Virgina
14 days ago
I think option D does support Azure Attestation. It's worth looking into the details to confirm.
upvoted 0 times
...
Dannette
25 days ago
Option D looks promising with the Intel SGX enclaves, but I'm not sure if it supports Azure Attestation. I'll need to research that further.
upvoted 0 times
...
...
Cyril
1 months ago
I see your point, Alysa. However, I think SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves could also be a strong contender.
upvoted 0 times
...
Alysa
1 months ago
But the requirement mentions hardware-based encryption, which is why I think Azure SQL Database with Intel SGX enclaves is the better choice.
upvoted 0 times
...
Colby
2 months ago
I disagree, I believe Azure SQL Managed Instance that has Always Encrypted configured is the way to go.
upvoted 0 times
...
Alysa
2 months ago
I think the best option is Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves.
upvoted 0 times
...

Save Cancel