Microsoft
DP-300 · Question #52
Drag and Drop Question You have an Azure SQL database that contains a table named Employees. Employees contains a column named Salary. You need to encrypt the Salary column. The solution must prevent
Sign in or unlock DP-300 to reveal the answer and full explanation for question #52. The question stem and answer options stay visible for context.
Submitted by ashley.k· Mar 6, 2026Implement data security and encryption in Azure SQL - specifically understanding Always Encrypted architecture (CMK → CEK → column encryption) and distinguishing it from TDE and Dynamic Data Masking based on DBA access prevention requirements.
Question
Drag and Drop Question You have an Azure SQL database that contains a table named Employees. Employees contains a column named Salary. You need to encrypt the Salary column. The solution must prevent database administrators from reading the data in the Salary column and must provide the most secure encryption. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Answer:
Exhibit
Answer Area
Drag items
Encrypt the Salary column by using the randomized encryption type.Create a column encryption key.Enable Transparent Data Encryption (TDE).Encrypt the Salary column by using the deterministic encryption type.Apply a dynamic data mask to the Salary column.Create a column master key.
Unlock DP-300 to see the answer
You've previewed enough free DP-300 questions. Unlock DP-300 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Always Encrypted#Azure SQL Database#Column Encryption#Data Security