AZ-500: Microsoft Azure Security Technologies

By Microsoft · Question Mode

QuestionQ21

Secure compute, storage, and databases

You have an Azure SQL database and implement Always Encrypted.

You need to ensure that application developers can retrieve and decrypt data in the database.

Which two pieces of information should you give the developers? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Choose two
Explanation

Always Encrypted encrypts data with a column encryption key, which is itself protected by a column master key held in an external key store. An Always Encrypted-enabled client driver must be able to access the column master key to decrypt the column encryption key and return plaintext data. Developers therefore require the column master key and credentials that authorize its use.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!