DP-800: Developing AI-Enabled Database Solutions

By Microsoft · Question Mode

QuestionQ100

VerifiedSecure, optimize, and deploy database solutions

You have an Azure SQL database that includes a table named Customer. Customer has these columns:

  • NationalIDNumber is unique for each customer.
  • InvestigationNotes holds free-form text.

You have a stored procedure that carries out point lookups using NationalIDNumber and returns InvestigationNotes in the query results without filtering by InvestigationNotes.

You need to encrypt both columns by using Always Encrypted with the highest possible security.

Which Always Encrypted encryption type should you use for each column?

Explanation

Deterministic Always Encrypted encryption is required for NationalIDNumber because point lookups use equality comparisons. InvestigationNotes is not used for filtering or other computations, so randomized encryption can be used; it provides the higher confidentiality because identical plaintext values encrypt to different ciphertext values.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!