CCSP · Question #259
When using transparent encryption of a database, where does the encryption engine reside?
The correct answer is D. Within the database. Transparent database encryption processes encryption and decryption directly within the database engine, requiring no application changes.
Question
When using transparent encryption of a database, where does the encryption engine reside?
Options
- AAt the application using the database
- BOn the instance(s) attached to the volume
- CIn a key management system
- DWithin the database
How the community answered
(41 responses)- B2% (1)
- C2% (1)
- D95% (39)
Why each option
Transparent database encryption processes encryption and decryption directly within the database engine, requiring no application changes.
If the encryption engine resided at the application level, it would not be 'transparent' to the database, and applications would need to manage encryption/decryption.
While data might reside on volumes attached to instances, transparent database encryption specifically refers to the encryption handled by the database software, not the underlying instance or volume directly.
A key management system (KMS) stores and manages the encryption keys, but it is not the engine that performs the actual encryption/decryption of the data itself.
Transparent Data Encryption (TDE) operates directly within the database engine, encrypting data at rest on disk. This means the encryption and decryption are handled seamlessly by the database system, making it 'transparent' to applications.
Concept tested: Transparent Data Encryption (TDE) location
Source: https://learn.microsoft.com/en-us/sql/relational-databases/security/encryption/transparent-data-encryption-tde?view=sql-server-ver16
Topics
Community Discussion
No community discussion yet for this question.