Microsoft Certified: Azure Security Engineer AssociateSecure data and applicationsEasy
A security auditor needs to regularly assess the security posture and compliance of an Azure SQL Database. The assessment should automatically identify vulnerabilities, misconfigurations, and deviations from best practices, providing actionable recommendations. Which Azure security feature is designed for this purpose?
- AAzure Security Center (now Microsoft Defender for Cloud) with SQL plan.
- BAzure Private Link for SQL Database.
- CAlways Encrypted with secure enclaves.
- DTransparent Data Encryption (TDE) with customer-managed keys.
Show answer & explanationAnswer & explanation
Correct answer: A. Azure Security Center (now Microsoft Defender for Cloud) with SQL plan.
Microsoft Defender for Cloud, with its SQL plan, provides continuous security posture management for Azure SQL Databases. It automatically discovers and assesses vulnerabilities, identifies misconfigurations, and offers actionable recommendations to improve the security posture and ensure compliance.
Why the other options are wrong
- B. Azure Private Link provides private connectivity, enhancing network security but not assessing the database's internal security configuration or vulnerabilities.
- C. Always Encrypted protects sensitive data in use from privileged users but does not perform a general security posture assessment of the database itself.
- D. TDE encrypts data at rest but does not perform security posture assessment or vulnerability scanning.
Microsoft Defender for Cloud (SQL plan)
A security offering within Microsoft Defender for Cloud that provides comprehensive security posture management, vulnerability assessment, and advanced threat protection for Azure SQL Databases.
- Continuously monitors SQL databases for vulnerabilities and misconfigurations.
- Provides actionable security recommendations.
- Integrates with Azure Policy for compliance.
- Offers advanced threat protection capabilities.
Memory trick: Let Defender be your SQL database's security auditor, constantly checking for weaknesses.