Microsoft Security Operations AnalystMitigate threats using Microsoft Defender for CloudEasy
A company is using Microsoft Defender for Cloud to monitor the security posture of its Azure environment. They have several Azure SQL Databases that store highly sensitive customer data. The security team needs to ensure that these databases are protected against common SQL injection attacks, brute-force attacks, and other database-specific threats. Which Defender for Cloud plan should be enabled to provide this specialized protection?
- AMicrosoft Defender for Servers
- BMicrosoft Defender for Storage
- CMicrosoft Defender for Key Vault
- DMicrosoft Defender for SQL
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Defender for SQL
Microsoft Defender for SQL provides specialized protection for Azure SQL Databases, SQL Servers on Azure Virtual Machines, and on-premises SQL servers, offering capabilities like vulnerability assessment, advanced threat protection for SQL injection, and anomalous activity detection.
Why the other options are wrong
- A. Defender for Servers protects virtual machines and physical servers, not specifically SQL databases.
- B. Defender for Storage protects Azure Storage accounts (blob, file, queue, table), not SQL databases.
- C. Defender for Key Vault protects Azure Key Vaults from threats, not SQL databases.
Microsoft Defender for SQL
Microsoft Defender for SQL provides a unified security package for Azure SQL Database, Azure SQL Managed Instance, SQL Server on Azure VMs, and SQL Servers on-premises, offering vulnerability assessment and advanced threat protection.
- Detects SQL injection, brute-force, and other database attacks.
- Includes vulnerability assessment to identify and remediate database vulnerabilities.
- Monitors for anomalous database activities.
- Part of Microsoft Defender for Cloud's enhanced security features.
Memory trick: Defender's domain: Each resource has its own guard.