nerdexam
Microsoft

70-450 · Question #104

You administer a SQL Server 2008 infrastructure. Several production databases use Transparent database encryption. You perform full database backups of the production databases as part of your…

The correct answer is C. Back up the database master key. The database master key is a symmetric key used to protect the private keys of certificates and asymmetric keys that are present in the database. When it is created, the master key is encrypted by using the Triple DES algorithm and a user-supplied password. When enabling TDE…

Design an optimized high availability and disaster recovery solution

Question

You administer a SQL Server 2008 infrastructure. Several production databases use Transparent database encryption. You perform full database backups of the production databases as part of your backup strategy. You need to ensure that the database backups can be restored on another SQL Server 2008 instance if the original host server fails. What should you do?

Options

  • ABack up the resource database.
  • BBack up the server master key.
  • CBack up the database master key.
  • DEnsure that the instances use the same service account.

How the community answered

(54 responses)
  • A
    2% (1)
  • B
    6% (3)
  • C
    81% (44)
  • D
    11% (6)

Explanation

The database master key is a symmetric key used to protect the private keys of certificates and asymmetric keys that are present in the database. When it is created, the master key is encrypted by using the Triple DES algorithm and a user-supplied password. When enabling TDE, you should immediately back up the certificate and the private key associated with the certificate. If the certificate ever becomes unavailable or if you must restore or attach the database on another server, you must have backups of both the certificate and the private key or you will not be able to open the database. The encrypting certificate or asymmetric should be retained even if TDE is no longer enabled on the database. Even though the database isnot encrypted, the database encryption key may be retained in the database and may need to be accessed for some operations.

Topics

#transparent data encryption#database master key#backup portability#TDE

Community Discussion

No community discussion yet for this question.

Full 70-450 Practice