Exam 70-765 topic 4 question 11 discussion

Actual exam question from Microsoft's 70-765

Question #: 11
Topic #: 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You deploy a new Microsoft Azure SQL database instance to support a variety of mobile application and public websites. You configure geo-replication with regions in Brazil and Japan.
You need to implement real-time encryption of the database and all backups.
Solution: You use the always Encrypted wizard to encrypt all possible for the tables in the primary instance.
Does the solution meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
Always Encrypted does not support geo replication.
Transparent Data Encryption (TDE) would provide a solution.
Note: Use the Always Encrypted Wizard to help protect sensitive data stored in a SQL Server database. Always Encrypted allows clients to encrypt sensitive data inside client applications and never reveal the encryption keys to SQL Server.
References:
https://azure.microsoft.com/en-us/blog/how-to-configure-azure-sql-database-geo-dr-with-azure-key-vault/ http://blog.pragmaticworks.com/sql-server-2016-data-masking-and-always-encrypted

by frogs at Jan. 31, 2021, 4:16 a.m.

Comments

Submit Cancel

frogs

4 years, 5 months ago

I think it's A. I don't see any documentation that Always Encrypted won't support geo-replication..

upvoted 1 times

...