Microsoft Exam SC-100 Topic 3 Question 60 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 60
Topic #: 3

[All SC-100 Questions]

You have an on-premises server that runs Windows Server and contains a Microsoft SQL Server database named DB1.

You plan to migrate DB1 to Azure.

You need to recommend an encrypted Azure database solution that meets the following requirements:

* Minimizes the risks of malware that uses elevated privileges to access sensitive data

* Prevents database administrators from accessing sensitive data

* Enables pattern matching for server-side database operations

* Supports Microsoft Azure Attestation

* Uses hardware-based encryption

What should you include in the recommendation?

ASQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves

BAzure SQL Database with virtualization-based security (VBS) enclaves

CAzure SQL Managed Instance that has Always Encrypted configured

DAzure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves

Show Suggested Answer

Suggested Answer: D

by Valentin at Jan 28, 2025, 02:33 PM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rima

4 months ago

I think A) SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves is the best choice for this scenario.

upvoted 0 times

...

Krissy

4 months ago

I'm leaning towards C) Azure SQL Managed Instance that has Always Encrypted configured, it seems like a secure option.

upvoted 0 times

...

Eura

4 months ago

I disagree, I believe the correct answer is D) Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves.

upvoted 0 times

...

Detra

4 months ago

Wow, this question has some serious security requirements. It's like the database needs a kevlar vest and a bodyguard. But hey, at least the data will be safer than a diamond in Fort Knox.

upvoted 0 times

Shoshana

3 months ago

D) Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves

upvoted 0 times

...

Oretha

3 months ago

C) Azure SQL Managed Instance that has Always Encrypted configured

upvoted 0 times

...

Marlon

3 months ago

B) Azure SQL Database with virtualization-based security (VBS) enclaves

upvoted 0 times

...

Rosalind

3 months ago

A) SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves

upvoted 0 times

...

I think Azure SQL Managed Instance with Always Encrypted is also a good choice. It's a simpler solution and might be more familiar to the organization. Plus, who knows, maybe the DBA is a magician and can still access the data even with the Intel SGX enclaves.

upvoted 0 times

...

Ayesha

5 months ago

Hmm, I'm not sure about the Intel SGX enclaves. Wasn't there some security vulnerability discovered in them recently? Better do some more research before recommending that option.

upvoted 0 times

Catina

4 months ago

B) Azure SQL Database with virtualization-based security (VBS) enclaves

upvoted 0 times

...

Gilberto

4 months ago

A) SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves

upvoted 0 times

...

Talia

5 months ago

I think the answer is B) Azure SQL Database with virtualization-based security (VBS) enclaves.

upvoted 0 times

...

Mitsue

5 months ago

I agree, the Intel SGX enclaves in Azure SQL Database are perfect for this scenario. They not only protect the data from malware but also prevent DBAs from accessing it, which is a great security feature.

upvoted 0 times

Joana

4 months ago

User 2

upvoted 0 times

...

Willie

5 months ago

User 1

upvoted 0 times

...

Sang

5 months ago

Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves seems like the best option here. It meets all the requirements and provides hardware-based encryption, which is crucial for protecting sensitive data.

upvoted 0 times

Clorinda

4 months ago

Azure SQL Managed Instance that has Always Encrypted configured might be a good option as well, but it doesn't provide hardware-based encryption like Intel SGX enclaves.

upvoted 0 times

...

Rodrigo

5 months ago

I think SQL Server on Azure Virtual Machines with virtualization-based security (VBS) enclaves could also be a good choice.

upvoted 0 times

...

Adell

5 months ago

I agree, Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves is the best option for this scenario.

upvoted 0 times

...

Microsoft Exam SC-100 Topic 3 Question 60 Discussion

Contribute your Thoughts:

Rima

Krissy

Eura

Detra

Shoshana

Oretha

Marlon

Rosalind

Kindra

Ayesha

Catina

Gilberto

Talia

Mitsue

Joana

Willie

Sang

Clorinda

Rodrigo

Adell