Valid 70-764 Dumps shared by PrepAwayExam.com for Helping Passing 70-764 Exam! PrepAwayExam.com now offer the newest 70-764 exam dumps, the PrepAwayExam.com 70-764 exam questions have been updated and answers have been corrected get the newest PrepAwayExam.com 70-764 dumps with Test Engine here:
You have a database named DB1 that contains two tables. You need to encrypt one column in each table by using the Always Encrypted feature. The solution must support groupings on encrypted columns. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Correct Answer: A,D
Explanation/Reference: Explanation: A: Use deterministic encryption for columns that will be used as search or grouping parameters, for example a government ID number. Deterministic encryption always generates the same encrypted value for any given plain text value. Using deterministic encryption allows point lookups, equality joins, grouping and indexing on encrypted columns. D: Always Encrypted uses two types of keys: column encryption keys and column master keys. A column encryption key is used to encrypt data in an encrypted column. A column master key is a key-protecting key that encrypts one or more column encryption keys. Incorrect Answers: B: A column encryption key (CEK), is a content encryption key (i.e. a key used to protect data) that is protected by a CMK. All Microsoft CMK store providers encrypt CEKs by using RSA with Optimal Asymmetric Encryption Padding (RSA-OAEP) with the default parameters specified by RFC 8017 in Section A.2.1. C: Randomized encryption uses a method that encrypts data in a less predictable manner. Randomized encryption is more secure, but prevents searching, grouping, indexing, and joining on encrypted columns. References: https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/always- encrypted-database-engine?view=sql-server-2017