StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Data classification encryption databases and storage

Practice question 473 of 498 · medium

Which two statements about Azure SQL data controls are correct? Select two.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.RLS and TDE are identical encryption mechanisms
  2. B.TDE alone prevents every authorized DBA from querying plaintext
  3. C.TDE protects stored database files and backups
  4. D.Masking rewrites the underlying database values permanently
  5. E.Dynamic masking is not encryption and does not replace sound authorization
Show the answer and explanation

✓ Correct answers

  • TDE protects stored database files and backups
  • Dynamic masking is not encryption and does not replace sound authorization

TDE is at-rest protection and masking changes applicable query output. RLS controls rows rather than encrypting them, authorized queries can return TDE plaintext, and masking does not rewrite the stored values.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.