Administering a SQL Database Infrastructure — Question 245

You work as a Database Administrator (DBA) at ABC.com.
You are in the process of deploying new servers running SQL Server 2012.
You need to deploy a SQL Server 2012 server to host databases used to host databases used by Research and Development department.
The databases used by the Research and Development department will store sensitive data.
A company security policy states that if Research and Development department database files are moved to another server, the files must be encrypted.
Which of the following solutions would meet the encryption requirement?

Answer options

• A. Encrypting File System (EFS).
• B. Transparent Data Encryption (TDE).
• C. Windows Bitlocker Drive Encryption.
• D. Secure Sockets Layer (SSL)

Correct answer: B

Explanation

The correct choice is Transparent Data Encryption (TDE), as it specifically encrypts SQL Server database files at rest, ensuring compliance with the company's policy when files are moved. Encrypting File System (EFS) is not designed for database files, Windows Bitlocker Drive Encryption secures entire drives rather than individual database files, and Secure Sockets Layer (SSL) is used for securing data in transit, not at rest.