DP-800: Developing AI-Enabled Database Solutions

By Microsoft · Question Mode

QuestionQ2

Secure, optimize, and deploy database solutions

You have an Azure SQL database that includes a column named Notes.

A security review finds that Notes contains sensitive data. You need to protect the data so that neither stored values nor query inputs disclose information about the actual data. The solution must prevent a user from inferring data relationships or repetitions from the encrypted output.

Which should you use?

Explanation

Always Encrypted with randomized encryption encrypts values and query parameters outside the database, and encrypts each occurrence of identical plaintext differently. This prevents encrypted output from revealing equality, repeated values, or relationships between plaintext values. Deterministic encryption intentionally produces matching ciphertext for matching plaintext and can therefore expose such patterns.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!