Home » Microsoft » 70-765 » Does the solution meet the goal?
You deploy a new Microsoft Azure SQL database instance to support a variety of mobile application and public websites. You configure geo-replication with regions in Brazil and Japan.
You need to implement real-time encryption of the database and all backups.
Solution: you enable Dynamic Data Masking on the primary replica.
Does the solution meet the goal?
A. Yes
B. No
Correct Answer: B
Explanation/Reference:
Explanation:
SQL Database dynamic data masking does not encrypt the data. Transparent Data Encryption (TDE) would provide a solution.
Note: SQL Database dynamic data masking limits sensitive data exposure by masking it to non-privileged users.
Dynamic data masking helps prevent unauthorized access to sensitive data by enabling customers to designate how much of the sensitive data to reveal with minimal impact on the application layer.
References: https://azure.microsoft.com/en-us/blog/how-to-configure-azure-sql-database-geo-dr-with-azure-key-vault/