QuestionQ33

Data and Database Security

A team of developers needs access to a database in a development environment, but that database holds sensitive data. What should the database administrator do before granting the developers access to the environment?

  • A Audit access to tables with sensitive data.
  • B Remove sensitive data from tables.
  • C Mask the sensitive data.
  • D Encrypt connections to the development environment.
Explanation

Masking sensitive data limits its exposure to nonprivileged users while allowing developers to work with the development database. Auditing records activity, and connection encryption protects data in transit, but neither prevents developers with database access from seeing sensitive values. Microsoft describes dynamic data masking as a way to limit exposure of sensitive data by masking it for nonprivileged users.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!