AZ-305 Question 71

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  I think the selected option is right and the answer is here https://learn.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-byok-overview?view=azuresql&tabs=azurekeyvault%2Cazurekeyvaultrequirements%2Cazurekeyvaultrecommendations

• Chose A2

  RSA 3072 is the strongest key size currently supported and recommended by Microsoft for customer-managed TDE on Azure SQL Managed Instance (as of 2025).

• Chose B1

  AES 256-bit encryption provides strong security and is the recommended key length for customer-managed TDE protectors. Azure Key Vault supports customer-managed keys (CMK) using AES 256 for TDE