Exam DP-200 topic 8 question 1 discussion

Actual exam question from Microsoft's DP-200

Question #: 1
Topic #: 8

DRAG DROP -
You need to implement the encryption for SALESDB.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Show Suggested Answer

Suggested Answer:

Data in SALESDB must encrypted by using Transparent Data Encryption (TDE). The encryption must use your own key.
Step 1: Implement an Azure key vault
You must create an Azure Key Vault and Key to use for TDE

Step 2: Create a key -
Step 3: From the settings of the Azure SQL database ג€¦
You turn transparent data encryption on and off on the database level.
Reference:
https://docs.microsoft.com/en-us/azure/sql-database/transparent-data-encryption-byok-azure-sql-configure

by Mily94 at April 28, 2021, 9:22 p.m.

Comments

Submit Cancel

wxlf23

3 years, 8 months ago

1 - Create key vault 2 - Create a SECRET 3 - From the setting of the Azure SQL SERVER, configure TDE settings https://github.com/MicrosoftLearning/DP-203-Data-Engineer/blob/master/Instructions/Labs/LAB_08_security_with_synapse_analytics.md

upvoted 1 times

...

dumpi

3 years, 12 months ago

given answer is correct

upvoted 1 times

...

Alekx42

4 years ago

To enable TDE with your own key you must do it at the Azure SQL SERVER level. At the Azure SQL DATABASE you can only turn it on / off. Since one of the requirement is that you must use your own key, the correct answer is the following: 1 - Create key vault 2 - Create a key 3 - From the setting of the Azure SQL server, configure TDE (by selecting the newly created key) However, it is also possible to create a key (or even the Azure key vault!) directy while enabling TDE from Azure SQL Server. So I guess you could shuffle the above steps and say that 1 - 3 - 2 is the correct answer... or even 3 - 1 - 2... personally I think that 1 - 2 - 3 just makes more sense.

upvoted 4 times

...

Srinivasnaveen

4 years ago

Should be Step 2: From the settings of the Azure SQL server, configure the Transparent data encryption settings Step 3 : Create a Key (https://www.sqlshack.com/transparent-data-encryption-tde-on-the-azure-sql-database/)

upvoted 1 times

...

Szym0ngl

4 years ago

Should be: Step 3: From the settings of the Azure SQL server, configure the Transparent data encryption settings (https://www.sqlshack.com/transparent-data-encryption-tde-on-the-azure-sql-database/,https://docs.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-byok-configure?tabs=azure-powershell)

upvoted 3 times

...

Mily94

4 years, 1 month ago

second shouldn't be A - secret?

upvoted 3 times

...