dp-203 Practice Question 1952
Exam: dp-203
Domain: Design and implement data security
Topic: Design and implement data policies and standards
Difficulty: medium
Your organization wants to ensure that sensitive data is protected from unauthorized access and also maintain compliance with data protection regulations. Which combination of Azure services would best achieve this goal for a SQL Database environment?
Answer Options
A
Use full database encryption and Azure Key Vault for key management.
B
Implement column-level encryption and use Purview Data Catalog for governance and discovery.
C
Deploy full database encryption and enable Transparent Data Encryption (TDE).
D
Apply data redaction and use Azure Security Center for monitoring.
Correct Answer
B: Implement column-level encryption and use Purview Data Catalog for governance and discovery.
Explanation
Column-level encryption provides strong protection by encrypting specific columns, while Purview Data Catalog helps in managing and discovering data assets, ensuring compliance. Full database encryption alone does not provide the same level of control over individual columns, and Azure Key Vault is used for key management rather than data protection.