Microsoft Cybersecurity Architect Expert SC-100
Get started today
Ultimate access to all questions.
Ultimate access to all questions.
Your company currently operates with on-premises Microsoft SQL Server databases and is planning a migration to Azure. To achieve a secure and cost-effective architecture for the databases in Azure, the company aims to minimize the operational burden associated with patching and to safeguard sensitive information through dynamic data masking. Given that Azure SQL Database, Azure SQL Managed Instance, and Azure Synapse Analytics offer dynamic data masking—which restricts sensitive data visibility to non-privileged users—what solution would you recommend?
Explanation:
The best option for migrating on-premises SQL Server databases to Azure while minimizing operational requirements and protecting sensitive data with dynamic data masking is Azure SQL Managed Instance. Azure SQL Managed Instance offers near 100% compatibility with the latest SQL Server database engine, provides a native virtual network implementation, and includes all the benefits of a fully managed platform as a service (PaaS) including automatic patching, version updates, and high availability. It supports dynamic data masking to limit sensitive data exposure to non-privileged users. Additionally, it is a cost-effective solution that minimizes the need for changes to existing applications and databases.