Valid 70-765 Dumps shared by ExamDiscuss.com for Helping Passing 70-765 Exam! ExamDiscuss.com now offer the newest 70-765 exam dumps, the ExamDiscuss.com 70-765 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com 70-765 dumps with Test Engine here:
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet stated goals. Some questions sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You deploy a new Microsoft Azure SQL database instance to support a variety of mobile application and public websites. You configure geo-replication with regions in Brazil and Japan. You need to implement real-time encryption of the database and all backups. Solution: You enable Transparent Data Encryption (TDE) on the primary instance. Does the solution meet the goal?
Correct Answer: A
Explanation/Reference: Explanation: Azure SQL Database and Data Warehouse offer encryption-at-rest by providing Transparent Data Encryption (TDE) for all data written to disk, including databases, log files and backups. This protects data in case of unauthorized access to hardware. TDE provides a TDE Protector that is used to encrypt the Database Encryption Key (DEK), which in turn is used to encrypt the data. With the TDE and Bring Your Own Key (BYOK) offering currently in preview, customers can take control of the TDE Protector in Azure Key Vault. Taking advantage of TDE with BYOK for databases that are geo-replicated to maintain high availability requires to configure and test the scenario carefully. References: https://azure.microsoft.com/en-us/blog/how-to-configure-azure-sql-database-geo-dr-with- azure-key-vault/