MENU
You are designing the encryption standards for data at rest for an Azure resource
You need to provide recommendations to ensure that the data at rest is encrypted by using AES-256 keys. The solution must support rotating the encryption keys monthly.
Solution: For Azure SQL databases, you recommend Transparent Data Encryption (TDE) that uses customer-managed keys (CMKs).
Does this meet the goal?
Suggested Answer: A
Get Premium SC-100 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
MO
Moira
11 months ago
Yes, this is a solid approach for data encryption!
CH
Cherelle
11 months ago
I think it does, but double-check the key rotation process.
BO
Bok
12 months ago
Wait, can you really rotate keys monthly with TDE?
PA
Paris
12 months ago
Totally agree, this meets the requirements!
DE
Desiree
1 year ago
TDE with CMKs supports AES-256, so that's good!
LO
Louvenia
1 year ago
I’ve seen similar questions before, and I think TDE does allow for key rotation, but I’m not 100% confident it meets the monthly rotation requirement.
VI
Vincent
1 year ago
I feel like TDE is a solid choice for encryption at rest, but I’m uncertain if it meets all the requirements for key management.
AL
Alida
1 year ago
I remember a practice question where we discussed TDE and CMKs, and I think it did mention key rotation, but I can't recall the specifics.
BE
Bernadine
1 year ago
I think using TDE with customer-managed keys is a good approach, but I'm not entirely sure if it supports monthly key rotation.
DA
Daniel
1 year ago
Hmm, I'm a little unsure about the difference between A and B here. I'll need to think through the concepts of premium rates and matching costs to income to decide the best answer.
TE
Telma
1 year ago
Hmm, I'm not sure about this one. I'll need to think it through carefully to make sure I don't miss any details.
BL
Blythe
1 year ago
I think PAI nodes can only be added after PAI experiments are created, but I'm not completely sure.
KI
Kimbery
1 year ago
I think there was a similar practice question about failover strategies we looked at. It might be related to option C, but that handover mechanism seems a bit complicated.