DP-300 Certification Practice Question #68

Question

You have an Azure SQL database that contains a table named Employees. Employees contains a column named Salary.
You need to encrypt the Salary column. The solution must prevent database administrators from reading the data in the Salary column and must provide the most secure encryption.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Accepted Answer

To prevent database administrators from reading sensitive column data, Always Encrypted must be implemented. The correct configuration sequence starts with creating a Column Master Key (CMK) to protect the column keys, followed by creating a Column Encryption Key (CEK) which is encrypted by the CMK. Finally, you modify the table to encrypt the target `Salary` column with the CEK. Because the requirement specifies the "most secure encryption" and does not specify a need for indexing or point lookups on the column, you should use the randomized encryption type (which is more secure than deterministic encryption).

More DP-300 practice questions