nerdexam
Microsoft

DP-300 · Question #196

Drag and Drop Question You have an Azure SQL database named DB1. DB1 contains a table that has a column named Col1. You need to encrypt the data in Col1. Which four actions should you perform for…

The correct answer is Create a database master key.; Create a certificate.; Create a symmetric key.; Open the symmetric key. To encrypt a column using symmetric encryption in Azure SQL Database, you must follow a strict dependency chain: first create a Database Master Key (DMK) to protect other keys, then create a Certificate to protect the symmetric key, then create a Symmetric Key (protected by the…

Submitted by jakub_pl· Mar 6, 2026Implement data security and encryption in Azure SQL Database - typically aligns with AZ-500 (Azure Security Engineer) or DP-300 (Azure Database Administrator) certification objectives covering database security, encryption at rest, and key management.

Question

Drag and Drop Question You have an Azure SQL database named DB1. DB1 contains a table that has a column named Col1. You need to encrypt the data in Col1. Which four actions should you perform for DB1 in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Answer:

Exhibit

DP-300 question #196 exhibit

Answer Area

Drag items

Create a database master key.Create a column master key.Open the symmetric key.Create a certificate.Update Col1.Create a symmetric key.

Correct arrangement

  • Create a database master key.
  • Create a certificate.
  • Create a symmetric key.
  • Open the symmetric key.

Explanation

To encrypt a column using symmetric encryption in Azure SQL Database, you must follow a strict dependency chain: first create a Database Master Key (DMK) to protect other keys, then create a Certificate to protect the symmetric key, then create a Symmetric Key (protected by the certificate), and finally Open the Symmetric Key before it can be used for encryption/decryption operations. This sequence establishes the full key hierarchy required by SQL Server's encryption model before any data can be encrypted.

Topics

#Azure SQL Database#Data Encryption#Symmetric Key Encryption#Key Hierarchy

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full DP-300 Practice