Exam SC-100 topic 4 question 40 discussion

To meet these requirements, I recommend using Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves. This solution provides hardware-based encryption and supports Microsoft Azure Attestation. It also enables secure enclaves for server-side operations, such as pattern matching, while ensuring that sensitive data remains inaccessible to database administrators. https://learn.microsoft.com/en-us/sql/relational-databases/security/encryption/configure-always-encrypted-enclaves?view=sql-server-ver16&viewFallbackFrom=azuresql

C. Azure SQL Managed Instance that has Always Encrypted configured Here's why: Minimizes the risks of malware: Always Encrypted ensures that sensitive data is encrypted both in transit and at rest, reducing the risk of unauthorized access. Prevents database administrators from accessing sensitive data: With Always Encrypted, even database administrators cannot access the plaintext data. Enables pattern matching for server-side database operations: Always Encrypted with secure enclaves supports rich queries, including pattern matching. Supports Microsoft Azure Attestation: Azure SQL Managed Instance supports Always Encrypted with secure enclaves, which can be attested using Microsoft Azure Attestation. Uses hardware-based encryption: Always Encrypted can use Intel Software Guard Extensions (Intel SGX) for hardware-based encryption

D. Azure SQL Database with Intel Software Guard Extensions (Intel SGX) enclaves

Wasn't familiar with this one before but it looks correct. https://learn.microsoft.com/en-us/azure/azure-sql/database/always-encrypted-enclaves-plan?view=azuresql