AZ-500: Enhancing Azure SQL Database Security: Understanding Advanced Threat Protection

Discover how to fortify your Azure SQL Database with Advanced Threat Protection. Learn which threats it detects and why SQL injection attempts are a cause for concern.

Question

You have an Azure SQL Database server named SQL1.
You plan to turn on Advanced Threat Protection for SQL1 to detect all threat detection types.
Which action will Advanced Threat Protection detect as a threat?

A. A user updates more than 50 percent of the records in a table.
B. A user attempts to sign as SELECT * from table1.
C. A user is added to the db_owner database role.
D. A user deletes more than 100 records from the same table.

Answer

B. A user attempts to sign as SELECT * from table1.

Explanation

Advanced Threat Protection can detect potential SQL injections: This alert is triggered when an active exploit happens against an identified application vulnerability to SQL injection. This means the attacker is trying to inject malicious SQL statements using the vulnerable application code or stored procedures.

Reference

• Microsoft Docs > Shared concepts > Security > SQL Advanced Threat Protection

The latest Microsoft AZ-500 Azure Security Technologies certification actual real practice exam question and answer (Q&A) dumps are available free, which are helpful for you to pass the Microsoft AZ-500 Azure Security Technologies exam and earn Microsoft AZ-500 Azure Security Technologies certification.