DP-800: Developing AI-Enabled Database Solutions

By Microsoft · Question Mode

QuestionQ81

VerifiedSecure, optimize, and deploy database solutions

You have an Azure SQL database named SalesDB and an Azure App Service app named sales-api. SalesDB contains a table named dbo.Customers. dbo.Customers has two columns named CreditCardNumber and TenantId.

Currently, sales-api connects to SalesDB by using SQL authentication with a stored username and password.

You need to recommend a solution that meets these requirements:

  • Provides a passwordless way for sales-api to access SalesDB.
  • Ensures that credit card numbers are NOT stored as plain text.

What should you include in the recommendation?

Explanation

A managed identity lets an Azure App Service authenticate to Azure SQL Database through Microsoft Entra ID without storing or rotating a SQL username and password. Always Encrypted protects sensitive columns such as credit card numbers by storing encrypted values in the database; the database engine does not have access to the plaintext encryption keys.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!