BenchMark Quizzes by MDFT Pro

Select Azure SQL Service and Attestation for Always Encrypted with Secure Enclaves

You work for MDFT Pro, a well-known training agency that manages an on-premises Microsoft SQL Server database named StudentRecords. This database contains highly sensitive information including student personal data, certification exam scores, and payment information. Mark, the Security Architect, is concerned about protecting this confidential data from malware attacks and unauthorized access by high-privileged database administrators.

You have an Azure subscription and need to migrate the StudentRecords database to an Azure SQL service. The solution must protect the confidentiality of sensitive data from malware and unauthorized administrators, support pattern matching for server-side database operations (such as searching encrypted student names), and use hardware-based encryption technology for maximum security.

Which Azure SQL service and attestation service should you include in the solution?

Choose all correct answers from the options below.

Explanations for each answer:

Azure SQL Service: Azure SQL Managed Instance is incorrect. Azure SQL Managed Instance does not support Always Encrypted with secure enclaves and Intel SGX hardware.
Azure SQL Service: Azure SQL Database DTU model is incorrect. The DTU model doesn't support Always Encrypted with secure enclaves. The vCore model is required.
Azure SQL Service: Azure SQL Database vCore model is correct. Azure SQL Database vCore model supports Always Encrypted with secure enclaves, providing hardware-based encryption and pattern matching capabilities.
Attestation service: Host Guardian Service (HGS) is incorrect. HGS is used for on-premises SQL Server with Always Encrypted with secure enclaves, not for Azure SQL Database.
Attestation service: Microsoft Azure Attestation is correct. Microsoft Azure Attestation is the attestation service used with Azure SQL Database for Always Encrypted with secure enclaves.
Attestation service: No attestation is incorrect. Attestation is required to verify the integrity of the secure enclave for Always Encrypted with secure enclaves.

Learn more about Always Encrypted with secure enclaves:

Always Encrypted With Secure Enclaves

Practice Exam

Select Azure SQL Service and Attestation for Always Encrypted with Secure Enclaves

Discuss this question on social media: