Administering a SQL Database Infrastructure — Question 103

Note: This question is part of a series of questions that use the same or similar answer choices. An answer choice may be correct for more than one question in the series. Each question is independent of the other questions in this series. Information and details provided in a question apply only to that question.
You manage a Microsoft SQL Server environment. You implement Transparent Data Encryption (TDE).
A user will assist in managing TDE.
You need to ensure that the user can view the TDE metadata while following the principle of lease privilege.
Which permission should you grant?

Answer options

• A. DDLAdmin
• B. db_datawriter
• C. dbcreator
• D. dbo
• E. View Database State
• F. View Server State
• G. View Definition
• H. sysadmin

Correct answer: G

Explanation

The correct answer is G, View Definition, as it allows the user to view the metadata of TDE without granting excessive privileges. Other options, such as sysadmin and DDLAdmin, provide broader permissions that are not necessary for just viewing TDE metadata.