70-450 · Question #91
You are a professional level SQL Sever 2008 Database Administrator. A new database application is hosted by the instance. The data security strategy should be designed for the application. The data…
The correct answer is B. Transparent data encryption should be enabled for the Publisher, Distribution, and Subscriber. You can take several precautions to help secure the database such as designing a secure system, encrypting confidential assets, and building a firewall around the database servers. However, in a scenario where the physical media (such as drives or backup tapes) are stolen, a…
Question
You are a professional level SQL Sever 2008 Database Administrator. A new database application is hosted by the instance. The data security strategy should be designed for the application. The data should be duplicated to another instance of SQL Server 2008 by utilizing the Snapshot duplication. Since you are the technical support of the company, you should make sure that all stored data should be encrypted, and the minimum amount of administrative effort should be utilized. Which action will you perform?
Options
- AEncrypted connections should be enabled between the instances.
- BTransparent data encryption should be enabled for the Publisher, Distribution, and Subscriber
- CTransparent data encryption for the MSDB database should be enabled on the two instances.
- DCertificate-based encryption should be enabled for the Publisher, Distribution, and Subscriber
How the community answered
(27 responses)- A15% (4)
- B74% (20)
- C7% (2)
- D4% (1)
Explanation
You can take several precautions to help secure the database such as designing a secure system, encrypting confidential assets, and building a firewall around the database servers. However, in a scenario where the physical media (such as drives or backup tapes) are stolen, a malicious party can just restore or attach the database and browse the data. One solution is to encrypt the sensitive data in the database and protect the keys that are used to encrypt the data with a certificate. This prevents anyone without the keys from using the data, but this kind of protection must be planned in advance. Transparent data encryption (TD E} performs real -time UO encryption and decryption of the data and log files. The encryption uses a database encryption key (DEK), which is stored in the database boot record for availability during recovery. The DEK is a symmetric key secured by using a certificate stored in the master database of the server or an asymn.@tric key protected by an EKM module. TDE protects data "at rest", meaning the data and log files. It provides theability to comply with many laws, regulations, and guidelines established in various industries. This enables software developers to encrypt data by using AES and 3DES encryption algorithms without changing existing applications.
Topics
Community Discussion
No community discussion yet for this question.