You have the following resources:
• 15 SQL Server on Azure Virtual Machines instances
• 20 Azure SQL databases
You need to recommend a solution to centrally monitor the resources for security vulnerabilities.
What should you include in the recommendation?
Microsoft Defender for SQL is designed to provide advanced security capabilities, including vulnerability assessment and threat protection. It is a comprehensive solution that can monitor both SQL Server on Azure Virtual Machines and Azure SQL databases for security vulnerabilities, offering a centralized approach to security management across these resources.
In my opinion it's MS Defender. Keyword is the "vulnerabilities" https://learn.microsoft.com/en-us/azure/defender-for-cloud/defender-for-sql-introduction
I agree Microsoft Defender is the correct answer to the question asked. Auditing and SQL insights primary functions are not to detect vulnerabilities. Defender will monitor both IaaS and PaaS resources.
Agree.
Its a blinder, Defender is best in this.
Security vulnerability = Microsoft Defender
Azure Defender monitors for vulnerabilities
I think the answer is D. Azure SQL Auditing can centrally monitor the resources for security vulnerabilities. Microsoft Defender is not specifically designed to centrally monitor SQL Server on Azure Virtual Machines instances and Azure SQL databases for security vulnerabilities. SQL insights is a feature that provides performance monitoring and tuning for SQL Server running on Azure Virtual Machines.
I am wrong. The answer should be B.
Comparto, respuesta D
shouldn't this be D, azure sql auditing, as sql insights gathers other metrics (performance)
shouldn't this be D, azure sql auditing, as sql insights gathers other metrics (performance)
"You need to recommend a solution to centrally monitor the resources for security vulnerabilities." - auditing is meant for monitoring specific securables (say, certain users) and events (login, logout, etc). It has nothing to do with detecting vulnerabilities. So the correct answer is B.
i think B. Microsoft Defender for SQL provides a set of advanced SQL security capabilities, including SQL Vulnerability Assessment and Advanced Threat Protection.
The question is about centrally monitoring resources for security vulnerability, which includes VMs here. Azure SQL Auditing does not monitor VMs. So the answer should be Microsoft Defender.
it shoud be SQL insight, this is for VM. Azure SQL is for Azure SQL Database and Azure Synapse Analytics https://learn.microsoft.com/en-us/azure/azure-sql/database/sql-insights-overview?view=azuresql https://learn.microsoft.com/en-us/azure/azure-sql/database/auditing-overview?view=azuresql
revised. SQL Insights is focused on performance optimization while Azure SQL Auditing is focused on security and compliance. it should be as Manuuzzz advised, Azure SQL auditing.