A company requires that all client connections to Azure Cosmos DB be encrypted in transit. The application uses the SQL API. What should you ensure is configured?

Use a shared access signature (SAS) token to encrypt the connection.

Set the connection string to use the 'https' prefix and require TLS for all connections.

Enable customer-managed keys to encrypt data in transit.

Disable public network access and use a private endpoint.

A healthcare organization stores sensitive patient data in Azure Cosmos DB. They have a compliance requirement to use encryption keys that they control and can revoke at any time. They also want to maintain the ability to rotate the keys independently from the Azure platform. What should you implement?

Use Azure Disk Encryption on the VMs that host the Cosmos DB account.

Use platform-managed encryption keys, which are automatically rotated by Azure.

Use customer-managed keys stored in Azure Key Vault, and configure the Cosmos DB account to use them for encryption at rest.

Enable encryption in transit by enforcing TLS for all connections.

Your company's security team requires that all data transmitted between an on-premises application and Azure Cosmos DB be encrypted. The application currently uses the SQL API and connects via the standard endpoint. What should you ensure is configured?

Enable encryption at rest using customer-managed keys.

Ensure that the application uses HTTPS or the Cosmos DB SDK's default TLS settings.

Configure a VPN gateway between the on-premises network and Azure.

Use the Azure Cosmos DB emulator for all connections.

What is the primary benefit of using customer-managed encryption keys over platform-managed keys in Azure Cosmos DB?

Automatic key rotation without any configuration.

Eliminates the need for network security.

Reduced latency for read operations.

Ability to disable or revoke encryption keys at any time.

Microsoft Certified:Azure Cosmos DB Developer Specialty

Domain 5Objective 3

Implement Security for an Azure Cosmos DB Solution DP-420 Practice Questions (Page 7)

Part of the Maintain an Azure Cosmos DB solution domain, which makes up ~22% of our current practice bank. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~9–14 in this domain), expect 3–5 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

9concepts

Questions 31–34

31application · easy
A company requires that all client connections to Azure Cosmos DB be encrypted in transit. The application uses the SQL API. What should you ensure is configured?
Select an answer first
32application · medium
A healthcare organization stores sensitive patient data in Azure Cosmos DB. They have a compliance requirement to use encryption keys that they control and can revoke at any time. They also want to maintain the ability to rotate the keys independently from the Azure platform. What should you implement?
Select an answer first
33application · medium
Your company's security team requires that all data transmitted between an on-premises application and Azure Cosmos DB be encrypted. The application currently uses the SQL API and connects via the standard endpoint. What should you ensure is configured?
Select an answer first
34foundation · easy
What is the primary benefit of using customer-managed encryption keys over platform-managed keys in Azure Cosmos DB?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to DP-420

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “DP-420” is a trademark of its owner, used for identification only.

Implement Security for an Azure Cosmos DB Solution DP-420 Practice Questions (Page 7)

Questions 31–34

A company requires that all client connections to Azure Cosmos DB be encrypted in transit. The application uses the SQL API. What should you ensure is configured?

Your company's security team requires that all data transmitted between an on-premises application and Azure Cosmos DB be encrypted. The application currently uses the SQL API and connects via the standard endpoint. What should you ensure is configured?

What is the primary benefit of using customer-managed encryption keys over platform-managed keys in Azure Cosmos DB?

Keep studying — Maintain an Azure Cosmos DB solution