DP-300 Certification Practice Question #97

Question

You have an Azure SQL database named DB1.

You need to encrypt DB1. The solution must meet the following requirements:

•	Encrypt data in motion.
•	Support comparison operators.
•	Provide randomized encryption.

What should you include in the solution?

Accepted Answer

The three requirements are: (1) encrypt data in motion, (2) support comparison operators, (3) provide randomized encryption. Standard Always Encrypted supports randomized encryption but blocks comparison operators on randomized-encrypted columns. Always Encrypted with secure enclaves extends this by processing comparisons inside a trusted execution environment (secure enclave), satisfying all three requirements simultaneously. TDE and column-level encryption cannot satisfy requirements 2 and 3 together.

More DP-300 practice questions