70-450 · Question #104
You administer a SQL Server 2008 infrastructure. Several production databases use Transparent database encryption. You perform full database backups of the production databases as part of your…
The correct answer is C. Back up the database master key. The database master key is a symmetric key used to protect the private keys of certificates and asymmetric keys that are present in the database. When it is created, the master key is encrypted by using the Triple DES algorithm and a user-supplied password. When enabling TDE…
Question
You administer a SQL Server 2008 infrastructure. Several production databases use Transparent database encryption. You perform full database backups of the production databases as part of your backup strategy. You need to ensure that the database backups can be restored on another SQL Server 2008 instance if the original host server fails. What should you do?
Options
- ABack up the resource database.
- BBack up the server master key.
- CBack up the database master key.
- DEnsure that the instances use the same service account.
How the community answered
(54 responses)- A2% (1)
- B6% (3)
- C81% (44)
- D11% (6)
Explanation
The database master key is a symmetric key used to protect the private keys of certificates and asymmetric keys that are present in the database. When it is created, the master key is encrypted by using the Triple DES algorithm and a user-supplied password. When enabling TDE, you should immediately back up the certificate and the private key associated with the certificate. If the certificate ever becomes unavailable or if you must restore or attach the database on another server, you must have backups of both the certificate and the private key or you will not be able to open the database. The encrypting certificate or asymmetric should be retained even if TDE is no longer enabled on the database. Even though the database isnot encrypted, the database encryption key may be retained in the database and may need to be accessed for some operations.
Topics
Community Discussion
No community discussion yet for this question.