Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft SC-100 Exam - Topic 3 Question 60 Discussion

You have an on-premises server that runs Windows Server and contains a Microsoft SQL Server database named DB1.You plan to migrate DB1 to Azure.You need to recommend an encrypted Azure database solution that meets the following requirements:* Minimizes the risks of malware that uses elevated privileges to access sensitive data* Prevents database administrators from accessing sensitive data* Enables pattern matching for server-side database operations* Supports Microsoft Azure Attestation* Uses hardware-based encryptionWhat should you include in the recommendation?
D) Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves
A) SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves
B) Azure SQL Database with virtualization-based security (VBS) enclaves
C) Azure SQL Managed Instance that has Always Encrypted configured

Microsoft SC-100 Exam - Topic 3 Question 60 Discussion

Actual exam question for Microsoft's SC-100 exam
Question #: 60
Topic #: 3
[All SC-100 Questions]

You have an on-premises server that runs Windows Server and contains a Microsoft SQL Server database named DB1.

You plan to migrate DB1 to Azure.

You need to recommend an encrypted Azure database solution that meets the following requirements:

* Minimizes the risks of malware that uses elevated privileges to access sensitive data

* Prevents database administrators from accessing sensitive data

* Enables pattern matching for server-side database operations

* Supports Microsoft Azure Attestation

* Uses hardware-based encryption

What should you include in the recommendation?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Valentin at Jan 28, 2025, 02:33 PM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Bong
8 months ago
Wait, I didn't know Azure had hardware-based encryption options!
upvoted 0 times
...
Percy
9 months ago
A is also a solid option, especially with VBS enclaves.
upvoted 0 times
...
Mammie
9 months ago
Not so sure about that, D might be better with Intel SGX.
upvoted 0 times
...
Kristel
9 months ago
Definitely agree, C meets all the requirements!
upvoted 0 times
...
Bettina
9 months ago
I think option C is the best choice for Always Encrypted.
upvoted 0 times
...
Magda
10 months ago
I lean towards the Azure SQL Managed Instance option, but I’m uncertain if it fully supports Microsoft Azure Attestation like the others might.
upvoted 0 times
...
Aretha
10 months ago
I practiced a similar question where we had to choose between SQL Server on Azure VMs and Azure SQL Database. I feel like VBS enclaves might be the key to preventing admin access, but I can't recall the specifics.
upvoted 0 times
...
Kris
10 months ago
I think Azure SQL Database with Intel SGX enclaves could be a good fit since it supports hardware-based encryption, but I need to double-check if it allows for pattern matching.
upvoted 0 times
...
Sylvia
10 months ago
I remember studying about Azure SQL Managed Instance and its Always Encrypted feature, but I'm not sure if it meets all the requirements listed.
upvoted 0 times
...
Ellsworth
10 months ago
The requirements around data security and access controls are really important here. I'll need to double-check the capabilities of each option to ensure I recommend the one that fully meets all the criteria.
upvoted 0 times
...
Haley
10 months ago
Okay, let's see. Minimizing malware risks, preventing admin access to sensitive data, pattern matching, Azure Attestation support, and hardware-based encryption. I think Azure SQL Database with VBS enclaves might be the way to go here.
upvoted 0 times
...
Lewis
10 months ago
Hmm, this is a complex question with a lot of specific criteria. I'll need to make sure I understand each requirement thoroughly before deciding on the right solution.
upvoted 0 times
...
Marcelle
10 months ago
This looks like a tricky one. I'll need to carefully review the requirements and consider the different Azure database options to find the best fit.
upvoted 0 times
...
Rima
1 year ago
I think A) SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves is the best choice for this scenario.
upvoted 0 times
...
Krissy
1 year ago
I'm leaning towards C) Azure SQL Managed Instance that has Always Encrypted configured, it seems like a secure option.
upvoted 0 times
...
Eura
2 years ago
I disagree, I believe the correct answer is D) Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves.
upvoted 0 times
...
Detra
2 years ago
Wow, this question has some serious security requirements. It's like the database needs a kevlar vest and a bodyguard. But hey, at least the data will be safer than a diamond in Fort Knox.
upvoted 0 times
Shoshana
1 year ago
D) Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves
upvoted 0 times
...
Oretha
1 year ago
C) Azure SQL Managed Instance that has Always Encrypted configured
upvoted 0 times
...
Marlon
1 year ago
B) Azure SQL Database with virtualization-based security (VBS) enclaves
upvoted 0 times
...
Rosalind
1 year ago
A) SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves
upvoted 0 times
...
...
Kindra
2 years ago
I think Azure SQL Managed Instance with Always Encrypted is also a good choice. It's a simpler solution and might be more familiar to the organization. Plus, who knows, maybe the DBA is a magician and can still access the data even with the Intel SGX enclaves.
upvoted 0 times
...
Ayesha
2 years ago
Hmm, I'm not sure about the Intel SGX enclaves. Wasn't there some security vulnerability discovered in them recently? Better do some more research before recommending that option.
upvoted 0 times
Catina
1 year ago
B) Azure SQL Database with virtualization-based security (VBS) enclaves
upvoted 0 times
...
Gilberto
1 year ago
A) SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves
upvoted 0 times
...
...
Talia
2 years ago
I think the answer is B) Azure SQL Database with virtualization-based security (VBS) enclaves.
upvoted 0 times
...
Mitsue
2 years ago
I agree, the Intel SGX enclaves in Azure SQL Database are perfect for this scenario. They not only protect the data from malware but also prevent DBAs from accessing it, which is a great security feature.
upvoted 0 times
Joana
1 year ago
User 2
upvoted 0 times
...
Willie
2 years ago
User 1
upvoted 0 times
...
...
Sang
2 years ago
Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves seems like the best option here. It meets all the requirements and provides hardware-based encryption, which is crucial for protecting sensitive data.
upvoted 0 times
Clorinda
1 year ago
Azure SQL Managed Instance that has Always Encrypted configured might be a good option as well, but it doesn't provide hardware-based encryption like Intel SGX enclaves.
upvoted 0 times
...
Rodrigo
2 years ago
I think SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves could also be a good choice.
upvoted 0 times
...
Adell
2 years ago
I agree, Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves is the best option for this scenario.
upvoted 0 times
...
...

Save Cancel