Provisioning SQL Databases — Question 54

You are the database administrator for your company. Your company has one main office and two branch offices. You plan to create three databases named DB1,
DB2, and DB3 that will be hosted on one Azure SQL Database server. You have the following requirements:
✑ The main office must be able to connect to all three databases.
✑ The branch offices must be able to connect to DB2 and DB3.
✑ The branch offices must not be able to access DB1.
You need to configure transparent data encryption (TDE) for DB1. Which two actions should you perform? Each correct answer presents part of the solution.

Answer options

• A. Run CREATE CERTIFICATE certl WITH Subject = TDE Cert1 on DB1.
• B. Connect to DB1.
• C. Run ALTER DATABASE DB1 SET ENCRYPTION ON;.
• D. Connect to the master database.
• E. Run CREATE MASTER KEY on the master database.

Correct answer: B, C

Explanation

To configure transparent data encryption for DB1, you first need to connect to the database itself (option B) and then enable encryption by executing the command (option C). The other options either pertain to creating certificates or connecting to different databases, which are not necessary for setting up TDE specifically on DB1.