DP-203 Certification Practice Question #212

Question

You have an Azure Synapse Analytics SQL pool named Pool1 on a logical Microsoft SQL server named Server1.
You need to implement Transparent Data Encryption (TDE) on Pool1 by using a custom key named key1.
Which five actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Accepted Answer

Microsoft?s BYOK guidance for Azure SQL and dedicated SQL pools is: prepare Key Vault and key, assign the server?s managed identity so it can unwrap the key, configure the server-level TDE protector to the customer-managed key, and only then enable TDE on the database or pool. The community split is limited to the last two steps, but the official sequence favors configuring the protector before enabling TDE, so that encryption starts with the intended customer-managed key in place.

More DP-203 practice questions