You have an Azure subscription that contains a key vault and an Azure SQL server. You need to deploy an Azure SQL database that uses Transparent Data Encryption (TDE) and a customer-managed key…

Question

Options

• Aa standard general-purpose v2 storage account
• Ban app registration
• Ca user account that is assigned the SQL Security Manager role
• Da user-assigned managed identity

• A
  16% (4)
• B
  8% (2)
• C
  4% (1)
• D
  72% (18)

Explanation

Requirements for configuring Azure Key Vault (AKV) * Soft-delete and purge protection features must be enabled on the key vault to protect from data loss due to accidental key (or key vault) deletion. *-> Grant the server or managed instance access to the key vault (get, wrapKey, unwrapKey) using its Microsoft Entra identity. The server identity can be a system-assigned managed identity or a user-assigned managed identity assigned to the server. When using the Azure portal, the Microsoft Entra identity gets automatically created when the server is created. When using PowerShell or Azure CLI, the Microsoft Entra identity must be explicitly created and should be * When using a firewall with AKV, you must enable the option Allow trusted Microsoft services to bypass the firewall, unless you're using private endpoints for the AKV. https://learn.microsoft.com/en-us/azure/azure-sql/database/transparent-data-encryption-byok-

No community discussion yet for this question.