nerdexam
MicrosoftMicrosoft

AZ-500 · Question #386

AZ-500 Question #386: Real Exam Question with Answer & Explanation

The correct answer is D: Key1 and key2 only. The key must be an asymmetric, RSA or RSA HSM key. The supported key lengths are 2048-bit https://docs.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-byok-

Submitted by suresh_in· Mar 6, 2026Secure compute, storage, and databases

Question

You have an Azure subscription that contains an Azure SQL database named SQL1 and an Azure key vault named KeyVault1. KeyVault1 stores the keys shown in the following table. You reed to configure Transparent Data Encryption (TDE). TDE will use a customer-managed key for SQL1?

Options

  • AKey1, Key2, Key3 and Key4
  • BKey1 only
  • CKey2 only
  • DKey1 and key2 only
  • EKey2 and Key3 only

Explanation

The key must be an asymmetric, RSA or RSA HSM key. The supported key lengths are 2048-bit https://docs.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-byok-

Community Discussion

No community discussion yet for this question.

Full AZ-500 PracticeBrowse All AZ-500 Questions