DP-300 Certification Practice Question #58

Question

You have an on-premises Microsoft SQL Server database named DB1.

You have an Azure subscription.

You need to migrate DB1 to an Azure SQL service that meets the following requirements:

•	Protects the confidentiality of sensitive data from malware and high-privileged unauthorized database administrators
•	Supports pattern matching for server-side database operations
•	Uses a hardware-based encryption technology

Which Azure SQL service and attestation service should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

To support hardware-based secure enclaves (Intel SGX) that allow pattern matching and protect data confidentiality from high-privileged users, you must use the DC-series hardware configuration. DC-series hardware is only available in the vCore purchasing model of Azure SQL Database. To verify the health of these secure enclaves in Azure, Microsoft Azure Attestation is the required attestation service (whereas Host Guardian Service is utilized for on-premises deployments).

More DP-300 practice questions