Microsoft
DP-300 · Question #216
Your company wants to create an Azure SQL Database. The database will contain a table that would have Employee information. There are columns which contain sensitive information. You have to enabled…
The correct answer is A. Windows certificate store D. Azure Key vault. The Encryption keys can only be stored in either Azure Key vault or the windows certificate store. From the implementation shown below, you can see that these are the sources you can use for storing the encryption keys…
Submitted by stefanr· Mar 6, 2026Implement a secure environment
Question
Your company wants to create an Azure SQL Database. The database will contain a table that would have Employee information. There are columns which contain sensitive information. You have to enabled Always Encryption for the data stored in the Employee table. Which of the following could be used to store the encryption keys required for enabling Always Encrypted for the table?
Exhibit
Options
- AWindows certificate store
- BPrivate Encryption keys
- CPublic Encryption keys
- DAzure Key vault
How the community answered
(40 responses)- A95% (38)
- B3% (1)
- C3% (1)
Explanation
The Encryption keys can only be stored in either Azure Key vault or the windows certificate store. From the implementation shown below, you can see that these are the sources you can use for storing the encryption keys. https://docs.microsoft.com/en-us/azure/azure-sql/database/always-encrypted-azure-key-vault- configure?tabs=azure-powershell
Community Discussion
No community discussion yet for this question.