Microsoft Certified: Azure Security Engineer AssociateSecure data and applicationsMedium
A compliance officer needs to ensure that all Azure SQL Databases in their subscription are configured to automatically identify and report potential security vulnerabilities and misconfigurations. The solution must provide actionable recommendations and integrate with a centralized security posture management platform. Which Azure Defender for Cloud capability should be enabled for Azure SQL Databases?
- AAzure SQL Database Auditing
- BMicrosoft Defender for Cloud (Servers plan)
- CMicrosoft Defender for Cloud (SQL plan)
- DAzure Security Center Free tier
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Defender for Cloud (SQL plan)
Microsoft Defender for Cloud (SQL plan) provides advanced threat protection and vulnerability assessment for Azure SQL Databases, automatically identifying vulnerabilities, misconfigurations, and offering actionable recommendations, integrating with the centralized Defender for Cloud platform.
Why the other options are wrong
- A. Azure SQL Database Auditing records database events but does not automatically identify vulnerabilities or provide recommendations.
- B. The Servers plan is for virtual machines and physical servers, not specifically for Azure SQL Databases.
- D. The Azure Security Center Free tier offers basic security posture assessment but lacks the advanced vulnerability assessment and threat protection features specific to SQL Databases provided by the paid Defender for Cloud plans.
Microsoft Defender for Cloud (SQL plan)
A capability within Microsoft Defender for Cloud that provides advanced security for Azure SQL Databases, including vulnerability assessment, threat detection, and security recommendations.
- Automatically identifies database vulnerabilities and misconfigurations.
- Provides actionable recommendations to improve security posture.
- Detects anomalous activities indicating potential threats.
- Integrates with the broader Defender for Cloud platform.
Memory trick: Defender for SQL: Your database's personal security analyst.