Microsoft Certified Azure Solutions Architect Expert · Free Practice Question Hard
Question 5
You need to set up an Azure SQL database named GetCloudSkillsDB for your company. The database must meet specific security requirements, which are as follows:
When IT help desk supervisors query a table called 'customers', they must be able to view the complete credit card number.
When IT help desk operators query the same 'customers' table, they should only be able to see the last four digits of each credit card number.
A column named 'Credit Card rating' in the 'customers' table should never appear in plain text in the database system.
Which of the following options can be implemented to meet the security requirements for the 'Credit Card rating' column?
-
A
Always Encrypted
-
B
Defender for Endpoint
-
C
Transparent Data Encryption
-
D
Dynamic Data Masking
Reveal correct answer
Correct answer: A
A. Always Encrypted is the correct choice for meeting the security requirements for the 'Credit Card rating' column. It allows you to encrypt sensitive data, such as credit card numbers, at the client-side before sending it to the database. This ensures that the data is always encrypted, even when it is stored in the database, and only authorized users with the correct keys can decrypt and view the data.
B. Defender for Endpoint is not the correct choice for meeting the security requirements for the 'Credit Card rating' column. Defender for Endpoint is a security solution that helps protect endpoints from cyber threats, but it does not provide encryption or masking capabilities for specific columns in a database.
C. Transparent Data Encryption is not the correct choice for meeting the security requirements for the 'Credit Card rating' column. Transparent Data Encryption encrypts the entire database at rest, but it does not provide granular control over specific columns like 'Credit Card rating' in the 'customers' table.
D. Dynamic Data Masking is not the correct choice for meeting the security requirements for the 'Credit Card rating' column. Dynamic Data Masking can be used to obfuscate sensitive data in query results, but it does not provide encryption for the 'Credit Card rating' column to ensure that it never appears in plain text in the database system.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
