Exam DP-900 topic 1 question 86 discussion

Answer is correct Transparent data encryption (TDE) helps protect Azure SQL Database, Azure SQL Managed Instance, and Azure Synapse Analytics against the threat of malicious offline activity by encrypting data at rest.

Database. Always.

option C

Transparent Data Encryption encrypts the database or the server? ChatGPT Transparent Data Encryption (TDE) encrypts the entire database, including the data files, log files, and backup files. It does not encrypt the server itself. TDE operates at the database level and provides encryption for data at rest. This means that the data is encrypted on the storage level, ensuring that even if someone gains unauthorized access to the physical storage media, they would not be able to read the data without the appropriate encryption key.

IF THIS olateform is free why they are asking to PAY after 126 question.they are allowing to 126 quest. only

C correct. pls ref to : https://learn.microsoft.com/en-us/sql/relational-databases/security/encryption/transparent-data-encryption?view=sql-server-ver15 where lines as : One solution is to encrypt sensitive data in a database About TDE Encryption of a database file is done at the page level. The pages in an encrypted database ......

Correct Answer

MS docs: "Transparent data encryption (TDE) encrypts SQL Server, Azure SQL Database, and Azure Synapse Analytics data files. This encryption is known as encrypting data at rest", The highlight is on data files; implemented on servers>inherited by databases which hold data that is encrypted. C is correct

I think what the MS Documentation is trying to say about Transparent Data Encryption (TDE) is that TDE is installed at the server level but only applied at the Database level. So, the server is not encrypted but the databases on the server are encrypted.

allways de database

Answer "C" is correct as the question is not asking where its set, its asking what it protects or do.

it encrypts the database not the server. So answer is correct

Answer should be D "or Azure SQL Database and Azure Synapse, the TDE protector is set at the server level and is inherited by all databases associated with that server. " Source: https://docs.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-tde-overview?tabs=azure-portal

I feel the answer is correct, according to this link https://docs.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-tde-overview?tabs=azure-portal Transparent data encryption (TDE) helps protect Azure SQL Database, Azure SQL Managed Instance, and Azure Synapse Analytics against the threat of malicious offline activity by encrypting data at rest. It performs real-time encryption and decryption of the database, associated backups, and transaction log files at rest without requiring changes to the application. it seems to deal with database at rest to me.

For Azure SQL Database and Azure Synapse, the TDE protector is set at the server level and is inherited by all databases associated with that server. , Answer : D

The documentation says: "It performs real-time encryption and decryption of the database,..." So C is correct.

The answer is D https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/transparent-data-encryption?view=sql-server-ver15#:~:text=Transparent%20data%20encryption%20(TDE)%20encrypts,Designing%20a%20secure%20system.