Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceMedium
A company is developing a new application that will process highly sensitive personal identifiable information (PII). They are concerned about potential data breaches and need to ensure that their Azure SQL Database instances are configured with the highest level of security, including vulnerability assessments and advanced threat protection. Which Azure feature should they enable for their SQL Databases?
- AAzure Private Link
- BAzure Firewall
- CAzure DDoS Protection
- DAzure Database Security & Auditing
Show answer & explanationAnswer & explanation
Correct answer: D. Azure Database Security & Auditing
Azure Database Security & Auditing (often referred to as Microsoft Defender for SQL or Azure SQL Database Advanced Data Security) includes capabilities like vulnerability assessment to discover and remediate database vulnerabilities, and advanced threat protection to detect anomalous activities indicating potential threats, directly addressing the company's concerns for sensitive PII.
Why the other options are wrong
- A. Azure Private Link provides private connectivity to Azure services, enhancing network security, but doesn't offer database-specific vulnerability or threat protection.
- B. Azure Firewall provides network-level threat protection for all Azure resources, but not specific database-level vulnerability assessment or advanced threat detection.
- C. Azure DDoS Protection protects against Distributed Denial of Service attacks, which is a network-level concern, not database-specific vulnerability or threat detection for data breaches.
Azure Database Security & Auditing
A comprehensive suite of security capabilities for Azure SQL Database, including vulnerability assessment, advanced threat protection, and auditing.
- Includes vulnerability assessment.
- Provides advanced threat protection.
- Offers auditing for regulatory compliance.
- Enhances security for sensitive data in SQL databases.
Memory trick: Database Security: Your 'D' for 'Defense' for your sensitive data.