Microsoft Certified: Azure Security Engineer AssociateSecure data and applicationsMedium
A security auditor needs to regularly assess the security posture and compliance of an Azure SQL Database. The auditor requires automated recommendations for security improvements, vulnerability findings, and the ability to track compliance against industry benchmarks. Which Azure security service provides these capabilities for Azure SQL Database?
- AAzure Advisor
- BMicrosoft Defender for Cloud (SQL plan)
- CAzure Monitor
- DAzure Policy
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Defender for Cloud (SQL plan)
Microsoft Defender for Cloud, specifically its SQL plan, provides capabilities like vulnerability assessment, advanced threat protection, and security recommendations tailored for Azure SQL Database, enabling auditors to track compliance and improve security posture.
Why the other options are wrong
- A. Azure Advisor provides general recommendations for cost, performance, reliability, etc., but not detailed security posture management or vulnerability assessments for SQL databases.
- C. Azure Monitor collects and analyzes telemetry but doesn't provide security recommendations or vulnerability assessments for SQL databases.
- D. Azure Policy enforces organizational standards and assesses compliance against definitions, but it doesn't provide dynamic vulnerability scanning or advanced threat protection for SQL data.
Microsoft Defender for Cloud (SQL plan)
A security plan within Microsoft Defender for Cloud that provides a unified security management system for Azure SQL Database, offering vulnerability assessment, advanced threat protection, and security recommendations.
- Continuously monitors SQL databases for vulnerabilities and threats.
- Provides actionable security recommendations.
- Helps track compliance against security benchmarks.
Memory trick: Defender for SQL: your database's personal security analyst.