Microsoft
DP-300 · Question #282
Drag and Drop Question You have an Azure key vault named Vault1 and a SQL server on Azure Virtual Machines instance named SQL1. SQL1 hosts a database named DB1. You need to configure Transparent Data
Sign in or unlock DP-300 to reveal the answer and full explanation for question #282. The question stem and answer options stay visible for context.
Submitted by priya_blr· Mar 6, 2026Implement and manage data security - Configure encryption for data at rest using customer-managed keys and Azure Key Vault integration with SQL Server on Azure Virtual Machines
Question
Drag and Drop Question You have an Azure key vault named Vault1 and a SQL server on Azure Virtual Machines instance named SQL1. SQL1 hosts a database named DB1. You need to configure Transparent Data Encryption (TDE) on DB1 to use a key in Vault1. Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Answer:
Exhibit
Answer Area
Drag items
On SQL1, create a cryptographic provider and a Microsoft SQL Server credential.On SQL1, create a symmetric key.On SQL1, create a login from the asymmetric key.On SQL1, create a login from the symmetric key.Create an Azure AD service principal and grant the service principal permissions for Vault1.On SQL1, create an asymmetric key.
Unlock DP-300 to see the answer
You've previewed enough free DP-300 questions. Unlock DP-300 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Transparent Data Encryption#Azure Key Vault#SQL Server EKM#Azure AD Service Principal