Exam 70-764 topic 1 question 139 discussion

Actual exam question from Microsoft's 70-764

Question #: 139
Topic #: 1

You are creating a database that will store usernames and passwords for an application.
You need to recommend a solution to store the passwords in the database.
What should you recommend? More than one answer choice may achieve the goal. Select the BEST answer.

A. One-way encryption
B. Transparent Data Encryption (TDE)
C. Encrypting File System (EFS)
D. Reversible encryption

Show Suggested Answer

Suggested Answer: C 🗳️
1. Transparent Data Encryption (TDE) is a special case of encryption using a symmetric key. TDE encrypts an entire database using that symmetric key called the database encryption key. The database encryption key is protected by other keys or certificates which are protected either by the database master key or by an asymmetric key stored in an EKM module.
2. SQL Server provides the following mechanisms for encryption:
✑ Transact-SQL functions
✑ Asymmetric keys
✑ Symmetric keys
✑ Certificates
✑ Transparent Data Encryption

by RohitM at Sept. 23, 2019, 11:19 p.m.

Comments

Submit Cancel

msamm

Highly Voted 5 years, 8 months ago

The correct Answer is A - One Way Encryption. Among the given options that would be the most secure without much changes Reference : https://www.mssqltips.com/sqlservertip/4037/storing-passwords-in-a-secure-way-in-a-sql-server-database/ https://www.sqlservercentral.com/forums/topic/encrypt-password-in-sql-server-database

upvoted 5 times

...

maddy1989

Most Recent 4 years, 5 months ago

Answer is B

upvoted 1 times

...

dxico

4 years, 5 months ago

A. https://www.mssqltips.com/sqlservertip/4037/storing-passwords-in-a-secure-way-in-a-sql-server-database/

upvoted 1 times

...

norbert1

4 years, 9 months ago

i also read msamms article - sounds "correct" - but does microsoft really put i focus on one way encryption vs. tde --> i dont know..;-)

upvoted 1 times

...

norbert1

4 years, 9 months ago

i read tapsarch article but i am not having an idea why he looks at it --> as TDE ist the answer

upvoted 1 times

tapsAch

4 years, 9 months ago

@norbert1.. Read the summary at the end in the article link that I have mentioned above

upvoted 1 times

...

tapsAch

4 years, 10 months ago

The correct answer is B https://bornsql.ca/blog/how-to-really-store-a-password-in-a-database/

upvoted 1 times

Hoglet

4 years, 5 months ago

The article says the answer is A “but you should also make sure that if your password hashes are accessible, that they cannot be reverse-engineered into the original passwords.“ ..... This is A

upvoted 1 times

...

MelKr

5 years ago

With TDE everybody with access to the database will be able to read the passwords. Only the database files are stored encrypted on the file system. As we do not know if the application needs to access decrypted passwords or if passwords hashes will be compared correct answer could be A or D. I would vote for A, otherwise the question would have mentioned that the password needs to be decryptable. The concept asked for is the "HASHBYTES" function.

upvoted 2 times

...