Home » Microsoft » 70-765 » Which two columns should use randomized encryption?
You are configuring a table to use the Always Encrypted feature. The table will have the columns configured as shown in the following table.
All the columns will be encrypted by using the AEAD_AES_256_CBC_HMAC_SHA_256 algorithm. Values will be stored in the most secure way possible.
Which two columns should use randomized encryption? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. Address
B. Gender
C. LastName
D. Tax Id
Correct Answer: AB
Explanation/Reference:
Always Encrypted supports two types of encryption: randomized encryption and deterministic encryption. Randomized encryption uses a method that encrypts data in a less predictable manner. Randomized encryption is more secure, but prevents searching, grouping, indexing, and joining on encrypted columns.
References: https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted-database-engine?view=sql-server-2017
If Tax ID is searched shouldn’t it be B and D?
Randomized encryption is more secure, but prevents searching
Sorry misread, answer is correct