nerdexam
Microsoft

AZ-305 · Question #130

You have to deploy an Azure SQL database named db1 for your company. The databases must meet the following security requirements: - When IT help desk supervisors query a database table named…

The correct answer is A. Always Encrypted. https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted- database-engine?view=sql-server-ver15

Submitted by brentm· Mar 6, 2026Design data storage solutions

Question

You have to deploy an Azure SQL database named db1 for your company. The databases must meet the following security requirements: - When IT help desk supervisors query a database table named customers, they must be able to see the full number of each credit card - When IT help desk operators query a database table named customers, they must only see the last four digits of each credit card number - A column named Credit Card rating in the customers table must never appear in plain text in the database system. - Only client applications must be able to decrypt the information that is stored in this column Which of the following can be implemented for the Credit Card rating column security requirement?

Options

  • AAlways Encrypted
  • BAzure Advanced Threat Protection
  • CTransparent Data Encryption
  • DDynamic Data Masking

How the community answered

(49 responses)
  • A
    43% (21)
  • B
    10% (5)
  • C
    14% (7)
  • D
    33% (16)

Explanation

https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted- database-engine?view=sql-server-ver15

Community Discussion

No community discussion yet for this question.

Full AZ-305 Practice