DP-420: Designing and Implementing Cloud-Native Applications Using Microsoft Azure Cosmos DBDemo

By Microsoft · Question Mode

QuestionQ61

Design and implement data models

You have an Azure Cosmos DB for NoSQL container whose items contain the following properties.

Question Image

You need to protect the data stored in the container by using Always Encrypted. For each property, use the strongest encryption type while ensuring that queries execute correctly.

What is the strongest encryption type you can apply to each property?

Select
dateOfBirth:
healthStatus:
hasProvidedTaxNumber:
Explanation

Deterministic encryption is required for dateOfBirth and hasProvidedTaxNumber because encrypted Cosmos DB properties used in filters must support equality filtering. Randomized encryption provides stronger confidentiality but prevents filtering, so it is appropriate for healthStatus, which is not filtered in queries.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!