nerdexam
MicrosoftMicrosoft

AZ-500 · Question #602

AZ-500 Question #602: Real Exam Question with Answer & Explanation

The correct answer is A: Column1. Set up encryption for specific database columns that include sensitive information to ensure Always Encrypted supports two types of encryption: Deterministic encryption always generates the same encrypted value for a given plaintext value. Using deterministic encryption allows po

Submitted by lucia.co· Mar 6, 2026Secure compute, storage, and databases

Question

You have an Azure subscription that contains an Azure SQL database named SQL1. SQL1 contains the columns shown in the following table. You configure SQL1 to use Always Encrypted. You need to configure deterministic encryption. Which column supports deterministic encryption?

Options

  • AColumn1
  • BColumn2
  • CColumn3
  • DColumn4

Explanation

Set up encryption for specific database columns that include sensitive information to ensure Always Encrypted supports two types of encryption: Deterministic encryption always generates the same encrypted value for a given plaintext value. Using deterministic encryption allows point lookups, equality joins, grouping, and indexing on encrypted columns. However, it might also allow unauthorized users to guess information about encrypted values by examining patterns in the encrypted column, especially if there's a small set of possible encrypted values, such as True/False, or North/South/East/West region. Randomized encryption uses a method that encrypts data unpredictably. Each identical plaintext input results in a distinct encrypted output. This improves the security of randomized encryption. https://learn.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted-

Community Discussion

No community discussion yet for this question.

Full AZ-500 PracticeBrowse All AZ-500 Questions