DP-300 Certification Practice Question #145

Question

You have the following resources:

•	15 SQL Server on Azure Virtual Machines instances
•	20 Azure SQL databases

You need to recommend a solution to centrally monitor the resources for security vulnerabilities.

What should you include in the recommendation?

Accepted Answer

The question explicitly asks for a solution to monitor **security vulnerabilities** across both SQL Server on Azure VMs and Azure SQL databases. Microsoft Defender for SQL (B) is purpose-built for exactly this: its Vulnerability Assessment feature scans for misconfigurations and security gaps, while Advanced Threat Protection detects anomalous access attempts — covering both IaaS and PaaS SQL resources centrally. Azure SQL Auditing (D) records who did what and when but does not assess vulnerabilities. SQL Insights (C) monitors performance metrics, not security weaknesses. The keyword "vulnerabilities" is the decisive signal.

More DP-300 practice questions