Sample questions from the Design and Implement Data Security section

This section contains sample questions from the data security section of the syllabus. Let's start with a Synapse SQL encryption-based question.

TDE/Always Encrypted

You have configured active geo-replication on an Azure Synapse SQL instance. You are worried that the data might be accessible from the replicated instances or backup files and need to safeguard it. Which security solution do you configure?

• Enable Always Encrypted
• Enable Transport Layer Security (TLS)
• Enable Transparent Data Encryption (TDE)
• Enable row-level security

Solution

Enable Transparent Data Encryption (TDE)

Explanation

• TDE encrypts the complete database, including offline access files such as backup files and log files.
• Always Encrypted is used to encrypt specific columns of database tables, not the complete database or the offline files.
• TLS is for encrypting data in motion. It doesn...