Exam DP-201 topic 14 question 1 discussion

Tagging data - Cosmos DB - encryption at resr Customer data - SQL DWH - TDE / SSL (SSL enabled by default)

I was impressed by Dp-200 model questions and quality but the answers for DP-201 questions by examtopics is not even average.. most of the answers are creating confusion when checked the discussions and sometimes the discussions are really useful like below.. one with real subject only can crack these questions..

I believe this questions and answers are too old and almost irrelevant. The current Microsoft Docs says " With the release of encryption at rest for Cosmos DB, all your databases, media attachments, and backups are encrypted. Your data is now encrypted in transit (over the network) and at rest (nonvolatile storage), giving you end-to-end encryption." Meaning you don't need to do anything to encrypt data at rest and in transit for Cosmos DB.

Answer is right. Combo DB gas TDE enabled by default. On synapse, we have to explicitly enable encryption at rest. It is not enable by default.

in essence TDE is Encryption at rest. SQL has this option by default (https://docs.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-tde-overview?tabs=azure-portal). In cosmos Al data is by default encrypted at rest ( but I do not think this is referred to as TDE: https://docs.microsoft.com/en-us/azure/cosmos-db/database-encryption-at-rest) So The answers should be Reversed: Cosmos : Encrypt at rest; Sql: TDE

There seems to be some issues with the answers. Firstly, all user data stored in Azure Cosmos DB is encrypted at rest and in transport by default as per the link https://docs.microsoft.com/en-us/azure/cosmos-db/database-encryption-at-rest, so I believe we really don't need to do anything, and if we have to select an answer, it should be Encryption at rest. Secondly, for Azure SQL DB or managed instance, TDE is enabled by default to encrypt data at rest, so we need TLS to encrypt data in transit, but TLS is not in the selection list.

Reverse/flip the options and it is correct

TDE is enabled by Default for CosmosDB and SQL DB. So both should be TDE. When you can get TDE by default why use Encryption at Rest?

Nehuu is right: Encryption at rest for Taggin data (Cosmos DB) TDE for customer information (SQL)

yes, it should be otherwise here. It's mentioned that tagging data should reside in document DB i.e. Cosmos DB, in that case, that is Encryption at rest. Customer data in parallel processing architecture i.e synapse, which is TDE

I also agreed with Nehuuu

Agree with Nehuuu