Provisioning SQL Databases — Question 67

You manage a Microsoft SQL Server environment in a Microsoft Azure virtual machine.
You must enable Always Encrypted for columns in a database.
You need to configure the key store provider.
What should you do?

Answer options

• A. Use the Randomized encryption type
• B. Modify the connection string for applications.
• C. Auto-generate a column master key.
• D. Use the Azure Key Vault.

Correct answer: D

Explanation

The correct answer is D, as Azure Key Vault is specifically designed to securely manage keys used for encryption in Azure services, including SQL Server. Option A, using Randomized encryption, pertains to the type of encryption rather than key management. Option B, modifying the connection string, is not directly related to key store provider configuration. Option C, auto-generating a column master key, does not address the requirement of configuring the key store provider.