Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Azure Solutions Architect Expert · Microsoft
Step Sequence / Reordering Question
Add and arrange the steps in the correct execution order.
Hotspot Solution:
Based on Gemini AI: Box2 for SSN: "Always Encrypted": This feature encrypts data at rest and in transit, ensuring it remains unreadable even by Azure administrators with access to the database server. The decryption keys are stored in Azure Key Vault, separate from the database, requiring stricter access controls. Why not the other options? - Column Encryption: While it encrypts data at rest, the decryption key is stored within the database server, potentially accessible to cloud administrators. - Dynamic Data Masking: This technique masks data within the query results but doesn't encrypt the data itself. Cloud administrators could still access the underlying data.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Dynamic data masking Always Encrypted
The given answer is correct. Dynamic Data Masking: Masks sensitive data in the result set of a query, limiting data exposure without changing the data in the database. Always Encrypted: Ensures sensitive data is encrypted both at rest and in motion, and can only be decrypted by the client application that has the encryption keys.
Based on Gemini AI: Box2 for SSN: "Always Encrypted": This feature encrypts data at rest and in transit, ensuring it remains unreadable even by Azure administrators with access to the database server. The decryption keys are stored in Azure Key Vault, separate from the database, requiring stricter access controls. Why not the other options? - Column Encryption: While it encrypts data at rest, the decryption key is stored within the database server, potentially accessible to cloud administrators. - Dynamic Data Masking: This technique masks data within the query results but doesn't encrypt the data itself. Cloud administrators could still access the underlying data.