ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam 70-765 All Questions

View all questions & answers for the 70-765 exam
Go to Exam

Exam 70-765 topic 3 question 118 discussion

Actual exam question from Microsoft's 70-765
Question #: 118
Topic #: 3
[All 70-765 Questions]

You are the database administrator for your company. Your company has one main office and two branch offices. You plan to create three databases named DB1,
DB2, and DB3 that will be hosted on one Azure SQL Database server. You have the following requirements:
✑ The main office must be able to connect to all three databases.
✑ The branch offices must be able to connect to DB2 and DB3.
✑ The branch offices must not be able to access DB1.
You need to configure transparent data encryption (TDE) for DB1. Which two actions should you perform? Each correct answer presents part of the solution.

  • A. Run CREATE CERTIFICATE certl WITH Subject = TDE Cert1 on DB1.
  • B. Connect to DB1.
  • C. Run ALTER DATABASE DB1 SET ENCRYPTION ON;.
  • D. Connect to the master database.
  • E. Run CREATE MASTER KEY on the master database.
Show Suggested Answer Hide Answer
Suggested Answer: BC 🗳️
You should connect to DB1. To encrypt DB1, you connect directly to DB1. When you connect to DB1.
You use your dbmanager or administrative credentials.
You should run ALTER DATABASE DB1 SET ENCRYPTION ON.
You use the ALTER DATABASE DB1 SET ENCRYPTION ON statement to encrypt the database. This is the statement that turns on TDE for Azure SQL
Database.
Incorrect Answers:
A: You should not run CREATE CERTIFICATE certl WITH Subject = TDE Cert' on DB1. You do not need to create a certificate to encrypt an Azure SQL database. This would be a part of the solution when you encrypt an on-premises database. You should not connect to the master database. To encrypt DB1, you need to connect directly to DB1. not to the master database.
E: You should not run CREATE MASTER KEY on the master database.
You would execute CREATE MASTER KEY when you have to encrypt an on-premises database.
References: https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/transparent-data-encryption
by jolsca at Sept. 15, 2020, 4:23 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
jolsca
Highly Voted 4 years, 7 months ago
Enable TDE on SQL Database by Using Transact-SQL Connect to the master database ALTER DATABASE DBname SET ENCRYPTION ON ; https://www.sqlshack.com/configure-tde-database-alwayson-using-azure-key-vault-sql-server-2016/
upvoted 7 times
Cococo
4 years, 6 months ago
You're creating a Master Key in master DB but then you need to connect (USE) to the DB you want the TDE encryption to be enabled on
upvoted 1 times
Cococo
4 years, 5 months ago
Sorry, I was wrong, jolsca is right.
upvoted 1 times
...
...
mickeyisacat615
4 years, 5 months ago
Tested After running below query against Azure SQL database , then checked in Azure, the encryption status is 'Encrypted' use master Alter database DatabaseName set encryption on
upvoted 1 times
...
...
Haidardba
Most Recent 4 years, 4 months ago
1.Connet to the master database 2.Run ALTER DATABASE DB1 SET ENCRYPTION ON
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago