Microsoft SC-100 Exam - Topic 1 Question 29 Discussion

Actual exam question for Microsoft's SC-100 exam

Question #: 29
Topic #: 1

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are designing the encryption standards for data at rest for an Azure resource.

You need to provide recommendations to ensure that the data at rest is encrypted by using AES-256 keys. The solution must support rotating the encryption keys monthly.

Solution: For Azure SQL databases, you recommend Transparent Data Encryption (TDE) that uses Microsoft-managed keys.

Does this meet the goal?

AYes

BNo

Show Suggested Answer

Suggested Answer: B

by Kate at Oct 02, 2023, 10:36 PM

Limited Time Offer

25%

Off

Get Premium SC-100 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lucina

10 months ago

Wait, can you really not rotate keys with TDE? That's odd!

upvoted 0 times

...

Pearline

10 months ago

Totally agree, this doesn't meet the goal.

upvoted 0 times

...

Denae

10 months ago

I thought TDE was managed by Microsoft, so no control over keys.

upvoted 0 times

...

Layla

10 months ago

But it doesn't support monthly key rotation, right?

upvoted 0 times

...

Timothy

11 months ago

TDE uses AES-256, so that's a plus!

upvoted 0 times

...

Karan

11 months ago

I believe TDE does encrypt data, but I think it might not meet the goal since it doesn’t allow for manual key rotation like customer-managed keys would.

upvoted 0 times

...

Willis

11 months ago

I’m a bit confused. I thought TDE was a good option, but I can't recall if it specifically supports AES-256 or if it uses a different standard.

upvoted 0 times

...

Lou

11 months ago

I remember practicing a similar question where we had to consider key management options. I feel like this might not meet the requirement for rotating keys.

upvoted 0 times

...

Shawna

11 months ago

I think TDE with Microsoft-managed keys does encrypt data at rest, but I'm not sure if it allows for monthly key rotation.

upvoted 0 times

...

Brunilda

11 months ago

I'm a bit unsure about this one. The question mentions that there might be multiple correct solutions, so I want to make sure I'm not missing something. Let me re-read the details carefully.

upvoted 0 times

...

Silva

11 months ago

Sweet, this seems straightforward. TDE with Microsoft-managed keys should meet the requirements nicely. I'll go with that and move on to the next question.

upvoted 0 times

...

Ben

11 months ago

Okay, the key points are that we need to use AES-256 encryption and support rotating the keys monthly. I think the TDE solution with Microsoft-managed keys sounds like it could work, but I'll double-check the details.

upvoted 0 times

...

Troy

11 months ago

Hmm, this looks like a tricky one. I'll need to carefully review the requirements to make sure I understand them fully before attempting a solution.

upvoted 0 times

...

Temeka

11 months ago

I've got a strategy - I'll start by eliminating the options that don't seem to fit, then focus in on the remaining ones to select the best answer.

upvoted 0 times

...

Oren

12 months ago

This looks like a tricky security question. I'll need to think carefully about the different user roles and how to control their access.

upvoted 0 times

...

Billy

12 months ago

This looks like a tricky question. I'll need to think carefully about the best approach.

upvoted 0 times

...