Microsoft · DP-300
Protecting data at rest and in transit
DP-300 · Lesson 9 of 22 · 1:12:50
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the DP-300 exam (Administering Microsoft Azure SQL Solutions). In this lesson: Transparent Data Encryption with service-managed or customer-managed keys, object-level encryption, Always Encrypted with deterministic and randomized encryption and secure enclaves, server-level and database-level firewall rules, private endpoints and public network access, and TLS for data in transit. Includes three original practice questions.
Preview the topics
- Contoso’s compliance team requires that Contoso can revoke Microsoft’s ability to decrypt its Azure SQL databases at any time. Which configuration fits?
- Contoso’s app must find patients by their exact national ID number, and the database administrators must never see the IDs in clear. What should the team configure on that column?
- Contoso added a private endpoint for its logical server, but a scan shows the server still answers from the internet. What should the team change?