Microsoft AZ-305 Exam - Topic 2 Question 60 Discussion

Actual exam question for Microsoft's AZ-305 exam

Question #: 60
Topic #: 2

You have to deploy an Azure SQL database named db1 for your company. The databases must meet the following security requirements

When IT help desk supervisors query a database table named customers, they must be able to see the full number of each credit card

When IT help desk operators query a database table named customers, they must only see the last four digits of each credit card number

A column named Credit Card rating in the customers table must never appear in plain text in the database system. Only client applications must be able to decrypt the information that is stored in this column

Which of the following can be implemented for the Credit Card rating column security requirement?

AAlways Encrypted

BAzure Advanced Threat Protection

CTransparent Data Encryption

DDynamic Data Masking

Show Suggested Answer

Suggested Answer: D

by Quinn at Jun 30, 2024, 12:44 AM

Limited Time Offer

25%

Off

Get Premium AZ-305 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kristel

10 months ago

Transparent Data Encryption just encrypts data at rest, not at the column level.

upvoted 0 times

...

Ashley

10 months ago

Definitely not Azure Advanced Threat Protection for this.

upvoted 0 times

...

Yasuko

10 months ago

Wait, can you really see full credit card numbers in a query? Seems risky!

upvoted 0 times

...

Lorean

10 months ago

I think Dynamic Data Masking could work too, but not for full encryption.

upvoted 0 times

...

Pamella

10 months ago

Always Encrypted is the way to go for sensitive data!

upvoted 0 times

...

Broderick

11 months ago

I recall a practice question where we had to choose between these options, and Always Encrypted stood out for protecting sensitive data like credit card info.

upvoted 0 times

...

Colette

11 months ago

I feel like Transparent Data Encryption is more about encrypting the database files rather than specific columns. Not sure if it fits this scenario.

upvoted 0 times

...

Lottie

11 months ago

I'm not entirely sure, but I remember something about Dynamic Data Masking being used for limiting visibility. Could that apply here?

upvoted 0 times

...

Vallie

11 months ago

I think we discussed Always Encrypted in class, and it seems like the right choice for keeping the Credit Card rating secure.

upvoted 0 times

...

Marnie

11 months ago

I'm leaning towards Always Encrypted. It provides end-to-end encryption of the data, which should meet the security needs for the credit card rating column.

upvoted 0 times

...

Sheldon

11 months ago

Dynamic Data Masking could be a good solution here. It allows you to selectively mask sensitive data, which seems to fit the requirements.

upvoted 0 times

...

Mel

11 months ago

I'm a bit confused by the difference between the supervisor and operator requirements. How can we ensure the supervisors see the full credit card numbers while the operators only see the last four digits?

upvoted 0 times

...

Lelia

11 months ago

Hmm, this looks like a tricky one. I'll need to carefully consider the security requirements and the options provided.

upvoted 0 times

...

Tandra

11 months ago

Okay, let's see. The key is protecting the credit card rating column, while still allowing access for IT help desk supervisors and operators. I think Always Encrypted might be the way to go.

upvoted 0 times

...

Georgiann

12 months ago

I think the answer is B, a double-spend attack. That's where the attacker tries to spend the same cryptocurrency twice, right? Seems like the most likely network-based attack.

upvoted 0 times

...

Sheron

12 months ago

Hmm, this seems like a tricky one. I'll need to think through the different staging modes and what processes would be common across all of them.

upvoted 0 times

...

Eun

1 year ago

I bet the IT help desk operators are just itching to see those full credit card numbers. Hey, as long as they don't share them on social media, right?

upvoted 0 times

...

Marge

1 year ago

Azure Advanced Threat Protection is great for detecting threats, but it doesn't address the specific security requirements mentioned in the question.

upvoted 0 times

...

Rosio

1 year ago

Transparent Data Encryption sounds tempting, but it won't help with the requirement to keep the Credit Card rating column secure. That's a separate concern.

upvoted 0 times

...

Leonard

1 year ago

I'm not sure Dynamic Data Masking is the right choice here. It only masks the output, but the data is still stored in plain text in the database.

upvoted 0 times

Susana

1 year ago

Exactly, it provides an extra layer of security by encrypting sensitive data.

upvoted 0 times

...

Leonora

1 year ago

That makes sense, Always Encrypted ensures that the data is encrypted at rest and in transit.

upvoted 0 times

...

Sabra

1 year ago

A) Always Encrypted is the correct choice for securing the Credit Card rating column.

upvoted 0 times

...

Shanda

1 year ago

I agree, Dynamic Data Masking may not be the best option for this scenario.

upvoted 0 times

...

Donte

1 year ago

D) Dynamic Data Masking

upvoted 0 times

...

Dalene

1 year ago

C) Transparent Data Encryption

upvoted 0 times

...

Linette

1 year ago

B) Azure Advanced Threat Protection

upvoted 0 times

...

Margarita

1 year ago

A) Always Encrypted

upvoted 0 times

...

Billye

1 year ago

Always Encrypted seems like the perfect solution for the Credit Card rating requirement. It ensures the data is encrypted at rest and in motion, and only client applications can decrypt it.

upvoted 0 times