Microsoft AZ-305 Exam - Topic 2 Question 60 Discussion

Actual exam question for Microsoft's AZ-305 exam

Question #: 60
Topic #: 2

You have to deploy an Azure SQL database named db1 for your company. The databases must meet the following security requirements

When IT help desk supervisors query a database table named customers, they must be able to see the full number of each credit card

When IT help desk operators query a database table named customers, they must only see the last four digits of each credit card number

A column named Credit Card rating in the customers table must never appear in plain text in the database system. Only client applications must be able to decrypt the information that is stored in this column

Which of the following can be implemented for the Credit Card rating column security requirement?

AAlways Encrypted

BAzure Advanced Threat Protection

CTransparent Data Encryption

DDynamic Data Masking

Show Suggested Answer

Suggested Answer: D

by Quinn at Jun 30, 2024, 12:44 AM

Limited Time Offer

25%

Off

Get Premium AZ-305 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kristel

5 months ago

Transparent Data Encryption just encrypts data at rest, not at the column level.

upvoted 0 times

...

Ashley

5 months ago

Definitely not Azure Advanced Threat Protection for this.

upvoted 0 times

...

Yasuko

5 months ago

Wait, can you really see full credit card numbers in a query? Seems risky!

upvoted 0 times

...

Lorean

5 months ago

I think Dynamic Data Masking could work too, but not for full encryption.

upvoted 0 times

...

Pamella

6 months ago

Always Encrypted is the way to go for sensitive data!

upvoted 0 times

...

Broderick

6 months ago

I recall a practice question where we had to choose between these options, and Always Encrypted stood out for protecting sensitive data like credit card info.

upvoted 0 times

...

Colette

6 months ago

I feel like Transparent Data Encryption is more about encrypting the database files rather than specific columns. Not sure if it fits this scenario.

upvoted 0 times

...

Lottie

6 months ago

I'm not entirely sure, but I remember something about Dynamic Data Masking being used for limiting visibility. Could that apply here?

upvoted 0 times

...

Vallie

6 months ago

I think we discussed Always Encrypted in class, and it seems like the right choice for keeping the Credit Card rating secure.

upvoted 0 times

...

Marnie

6 months ago

I'm leaning towards Always Encrypted. It provides end-to-end encryption of the data, which should meet the security needs for the credit card rating column.

upvoted 0 times

...

Sheldon

6 months ago

Dynamic Data Masking could be a good solution here. It allows you to selectively mask sensitive data, which seems to fit the requirements.

upvoted 0 times

...

Mel

6 months ago

I'm a bit confused by the difference between the supervisor and operator requirements. How can we ensure the supervisors see the full credit card numbers while the operators only see the last four digits?

upvoted 0 times

...

Lelia

6 months ago

Hmm, this looks like a tricky one. I'll need to carefully consider the security requirements and the options provided.

upvoted 0 times

...

Tandra

7 months ago

Okay, let's see. The key is protecting the credit card rating column, while still allowing access for IT help desk supervisors and operators. I think Always Encrypted might be the way to go.

upvoted 0 times

...

Georgiann

7 months ago

I think the answer is B, a double-spend attack. That's where the attacker tries to spend the same cryptocurrency twice, right? Seems like the most likely network-based attack.

upvoted 0 times

...

Sheron

7 months ago

Hmm, this seems like a tricky one. I'll need to think through the different staging modes and what processes would be common across all of them.

upvoted 0 times

...

Eun

11 months ago

I bet the IT help desk operators are just itching to see those full credit card numbers. Hey, as long as they don't share them on social media, right?

upvoted 0 times

...

Marge

11 months ago

Azure Advanced Threat Protection is great for detecting threats, but it doesn't address the specific security requirements mentioned in the question.

upvoted 0 times

...

Rosio

11 months ago

Transparent Data Encryption sounds tempting, but it won't help with the requirement to keep the Credit Card rating column secure. That's a separate concern.

upvoted 0 times

...

Leonard

11 months ago

I'm not sure Dynamic Data Masking is the right choice here. It only masks the output, but the data is still stored in plain text in the database.

upvoted 0 times

Susana

9 months ago

Exactly, it provides an extra layer of security by encrypting sensitive data.

upvoted 0 times

...

Leonora

9 months ago

That makes sense, Always Encrypted ensures that the data is encrypted at rest and in transit.

upvoted 0 times

...

Sabra

10 months ago

A) Always Encrypted is the correct choice for securing the Credit Card rating column.

upvoted 0 times

...

Shanda

10 months ago

I agree, Dynamic Data Masking may not be the best option for this scenario.

upvoted 0 times

...

Donte

10 months ago

D) Dynamic Data Masking

upvoted 0 times

...

Dalene

10 months ago

C) Transparent Data Encryption

upvoted 0 times

...

Linette

10 months ago

B) Azure Advanced Threat Protection

upvoted 0 times

...

Margarita

11 months ago

A) Always Encrypted

upvoted 0 times

...

Billye

11 months ago

Always Encrypted seems like the perfect solution for the Credit Card rating requirement. It ensures the data is encrypted at rest and in motion, and only client applications can decrypt it.

upvoted 0 times