A database administrator wants to clone an SQL database that has Transparent Data Encryption (TDE) enabled. Which two steps must be taken on the target server for this clone to be successful?…

Question

Options

• ABackup the .cer and .pvk files from the source database server VM.
• BBackup the keystore bundle file from the source database server VM.
• CRun the pre-clone command script.
• DRun the post-clone command script.

• A
  4% (2)
• B
  85% (45)
• C
  11% (6)

Explanation

When cloning an SQL database with Transparent Data Encryption (TDE) enabled in NDB, the target server must handle the encryption keys to ensure the cloned database remains functional and secure. TDE uses a keystore (e.g., a bundle file containing the master key and certificate) to encrypt data. Two steps are required: (1) The administrator must back up the keystore bundle file from the source database server VM and transfer it to the target server, ensuring the clone can decrypt the data. (2) After the clone is created, the administrator must run the post-clone command script, which configures the TDE keys on the target server, completes the encryption setup, and activates the cloned database.

No community discussion yet for this question.