DP-300: Administering Microsoft Azure SQL Solutions

By Microsoft · Question Mode

QuestionQ9

Implement a secure environment

You have an on-premises Microsoft SQL Server database named DB1 and an Azure subscription.

You need to migrate DB1 to an Azure SQL service that meets these requirements:

  • Protect the confidentiality of sensitive data from malware and unauthorized database administrators with high privileges.
  • Support pattern matching for server-side database operations.
  • Use hardware-based encryption technology.

Which Azure SQL service and attestation service should be included in the solution?

Select
Azure SQL service:
Attestation service:
Explanation

Always Encrypted with secure enclaves in Azure SQL Database uses Intel SGX hardware-based trusted execution environments to keep sensitive plaintext protected from privileged database administrators. Secure enclaves support confidential server-side operations such as pattern matching. Azure SQL Database vCore purchasing provides the required secure-enclave capability, and Microsoft Azure Attestation attests the enclave.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!