Exam DP-203 topic 2 question 82 discussion

Answer is correct : BE

To provide double encryption of all the data at rest in an Azure Synapse Analytics workspace, you should include the following components in the recommendation: A. An X.509 certificate: X.509 certificates are commonly used for securing communication channels and can be used for encrypting data at rest in conjunction with other encryption mechanisms. B. An RSA key: RSA keys are widely used for encryption purposes, including encrypting data at rest. By using an RSA key, you can encrypt the data before storing it, providing an additional layer of security.

I got this question today in exam 11-jan-2024

BE is correct https://learn.microsoft.com/en-us/azure/synapse-analytics/security/workspaces-encryption#workspace-encryption-configuration

BE is correct to provide double encryption at REST. RSA key and Azure key vault.

BE is correct

Answer: BE Explanation: Synapse workspaces encryption uses existing keys or new keys generated in Azure Key Vault. A single key is used to encrypt all the data in a workspace. Synapse workspaces support RSA 2048 and 3072 byte-sized keys, and RSA-HSM keys. The Key Vault itself needs to have purge protection enabled. Reference: https://docs.microsoft.com/en-us/azure/synapse-analytics/security/workspaces-encryption

A. Including an X.509 certificate in the solution can be used to provide encryption at rest for the data in Azure Synapse Analytics. X.509 certificates are widely used for securing data and communications. E. An Azure Key Vault with purge protection enabled can be utilized to securely store and manage encryption keys. By storing the encryption keys in Azure Key Vault, you can ensure that the keys are well protected and access to them is tightly controlled.

Correct.

Agree with the answer

Correct ans.