DP-200 Exam QuestionsBrowse all questions from this exam

DP-200 Exam - Question 205


DRAG DROP -

You need to implement the encryption for SALESDB.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Select and Place:

Exam DP-200 Question 205
Show Answer
Correct Answer:
Exam DP-200 Question 205

Data in SALESDB must encrypted by using Transparent Data Encryption (TDE). The encryption must use your own key.

Step 1: Implement an Azure key vault

You must create an Azure Key Vault and Key to use for TDE

Step 2: Create a key -

Step 3: From the settings of the Azure SQL database ג€¦

You turn transparent data encryption on and off on the database level.

Reference:

https://docs.microsoft.com/en-us/azure/sql-database/transparent-data-encryption-byok-azure-sql-configure

Discussion

6 comments
Sign in to comment
Alekx42
May 29, 2021

To enable TDE with your own key you must do it at the Azure SQL SERVER level. At the Azure SQL DATABASE you can only turn it on / off. Since one of the requirement is that you must use your own key, the correct answer is the following: 1 - Create key vault 2 - Create a key 3 - From the setting of the Azure SQL server, configure TDE (by selecting the newly created key) However, it is also possible to create a key (or even the Azure key vault!) directy while enabling TDE from Azure SQL Server. So I guess you could shuffle the above steps and say that 1 - 3 - 2 is the correct answer... or even 3 - 1 - 2... personally I think that 1 - 2 - 3 just makes more sense.

Mily94
Apr 29, 2021

second shouldn't be A - secret?

Szym0ngl
May 13, 2021

Should be: Step 3: From the settings of the Azure SQL server, configure the Transparent data encryption settings (https://www.sqlshack.com/transparent-data-encryption-tde-on-the-azure-sql-database/,https://docs.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-byok-configure?tabs=azure-powershell)

Srinivasnaveen
May 22, 2021

Should be Step 2: From the settings of the Azure SQL server, configure the Transparent data encryption settings Step 3 : Create a Key (https://www.sqlshack.com/transparent-data-encryption-tde-on-the-azure-sql-database/)

dumpi
Jun 13, 2021

given answer is correct

wxlf23
Sep 15, 2021

1 - Create key vault 2 - Create a SECRET 3 - From the setting of the Azure SQL SERVER, configure TDE settings https://github.com/MicrosoftLearning/DP-203-Data-Engineer/blob/master/Instructions/Labs/LAB_08_security_with_synapse_analytics.md