When using Always Encrypted, where does the encryption and decryption of sensitive data occur?

On the client application or driver

In a separate encryption gateway service

You are implementing Always Encrypted for a column that stores email addresses. The application needs to perform equality lookups on this column, but the security team requires that the data be encrypted with randomized encryption to prevent frequency-analysis attacks. What should you do?

Use Always Encrypted with VBS enclaves and randomized encryption.

Use randomized encryption and perform the lookup in the application by fetching all rows.

Use deterministic encryption for the column.

Use a separate lookup table with hashed values.

In Azure SQL Database, which object is required to exist before you can enable Transparent Data Encryption (TDE) on a database?

A transparent data encryption certificate in the master database

A database encryption key (DEK)

A server-level firewall rule allowing the administrator's IP

Which statement accurately describes how Transparent Data Encryption (TDE) affects database performance and application functionality?

TDE adds CPU overhead for encryption and decryption but does not require application modifications

TDE prevents database administrators from viewing sensitive data by encrypting it at the application layer

TDE encrypts data at the column level, allowing fine-grained control over which fields are encrypted

TDE requires significant changes to application queries and connection strings to work

Microsoft Certified:Azure Database Administrator Associate

Domain 2Objective 2

Implement Security for Data at Rest and Data in Transit DP-300 Practice Questions (Page 6)

Part of the Implement a secure environment domain, which accounts for 20–25% of the DP-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 3–5 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

9concepts

20–25%of the exam

Questions 26–30

26foundation · easy
Which T-SQL stored procedure is used to create a database-level firewall rule in Azure SQL Database?
Select an answer first
27foundation · easy
When using Always Encrypted, where does the encryption and decryption of sensitive data occur?
Select an answer first
28expert · hard
You are implementing Always Encrypted for a column that stores email addresses. The application needs to perform equality lookups on this column, but the security team requires that the data be encrypted with randomized encryption to prevent frequency-analysis attacks. What should you do?
Select an answer first
29foundation · easy
In Azure SQL Database, which object is required to exist before you can enable Transparent Data Encryption (TDE) on a database?
Select an answer first
30foundation · easy
Which statement accurately describes how Transparent Data Encryption (TDE) affects database performance and application functionality?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DP-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “DP-300” is a trademark of its owner, used for identification only.