CV0-003 · Question #129
An administrator is tasked with encrypting all Personally Identifiable Information (PII) within a cloud- based database. Which of the following types of encryption will ensure that ONLY this type of…
The correct answer is D. Table encryption. Table encryption targets specific tables within a database, allowing PII tables to be encrypted while leaving all other tables in plaintext.
Question
An administrator is tasked with encrypting all Personally Identifiable Information (PII) within a cloud- based database. Which of the following types of encryption will ensure that ONLY this type of information is encrypted while the rest of the database remains unencrypted?
Options
- AFile and folder encryption
- BTransport encryption
- CHard drive encryption
- DTable encryption
How the community answered
(21 responses)- A5% (1)
- B14% (3)
- C5% (1)
- D76% (16)
Why each option
Table encryption targets specific tables within a database, allowing PII tables to be encrypted while leaving all other tables in plaintext.
File and folder encryption operates at the OS level and would encrypt the entire database file, not just specific tables containing PII.
Transport encryption such as TLS/SSL protects data only while it is in transit between systems and does not encrypt data at rest within the database.
Hard drive encryption such as full disk encryption encrypts all data on the storage device indiscriminately, not just the specific PII-containing tables.
Table encryption operates at the individual table or column level within a relational database, enabling administrators to selectively encrypt only the tables containing PII while non-sensitive tables remain unencrypted, precisely satisfying the requirement for targeted rather than wholesale encryption.
Concept tested: Selective database table-level encryption for PII
Source: https://learn.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted-database-engine
Topics
Community Discussion
No community discussion yet for this question.