Home » Microsoft » 70-765 » Does the solution meet the goal?
You deploy a new Microsoft Azure SQL database instance to support a variety of mobile application and public websites. You configure geo-replication with regions in Brazil and Japan.
You need to implement real-time encryption of the database and all backups.
Solution: You use the always Encrypted wizard to encrypt all possible for the tables in the primary instance.
Does the solution meet the goal?
A. Yes
B. No
Correct Answer: B
Explanation/Reference:
Explanation:
Always Encrypted does not support geo replication.
Transparent Data Encryption (TDE) would provide a solution.
Note: Use the Always Encrypted Wizard to help protect sensitive data stored in a SQL Server database. Always Encrypted allows clients to encrypt sensitive data inside client applications and never reveal the encryption keys to SQL Server.
References: https://azure.microsoft.com/en-us/blog/how-to-configure-azure-sql-database-geo-dr-with-azure-key-vault/ http://blog.pragmaticworks.com/sql-server-2016-data-masking-and-always-encrypted