Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft Security solutionsMedium
A company is migrating its on-premises SQL databases to Azure SQL Database. They need a solution that can continuously monitor for vulnerabilities in their database configurations, detect anomalous activities like SQL injection attempts, and provide recommendations to improve database security. Which Azure security service is best suited for this requirement?
- AAzure Monitor
- BAzure SQL Database Advanced Threat Protection
- CAzure DDoS Protection Standard
- DAzure Network Security Groups
Show answer & explanationAnswer & explanation
Correct answer: B. Azure SQL Database Advanced Threat Protection
Azure SQL Database Advanced Threat Protection (ATP) provides a layer of security that detects anomalous activities indicating unusual and potentially harmful attempts to access or exploit databases. It also includes vulnerability assessment capabilities.
Why the other options are wrong
- A. Azure Monitor collects and analyzes telemetry for applications and infrastructure, but doesn't specifically provide advanced threat protection for SQL databases.
- C. Azure DDoS Protection Standard protects against distributed denial-of-service attacks, not database-specific vulnerabilities or threats.
- D. Azure Network Security Groups (NSGs) filter network traffic to and from Azure resources, acting as a firewall, but don't provide threat detection or vulnerability assessment for databases.
Azure SQL Database Advanced Threat Protection
A security feature that detects anomalous database activities and provides vulnerability assessments for Azure SQL Database.
- Part of Microsoft Defender for SQL.
- Detects SQL injection, brute force attacks, and anomalous access patterns.
- Provides actionable recommendations for security posture improvement.
Memory trick: SQL ATP is the 'guardian' watching your Azure SQL databases for trouble.