SC-100 Practice Question 4012
Exam: SC-100
Domain: Design security solutions for applications and data
Difficulty: hard
You are designing data encryption at rest for high-security healthcare databases in Azure SQL Database. The compliance standard mandates that database columns containing medical records must remain encrypted in memory during query processing. What technology fulfills this?
Answer Options
A
Always Encrypted with Secure Enclaves
B
Transparent Data Encryption (TDE) with service-managed keys only
C
BitLocker drive encryption on database server disks
D
TLS 1.2 in transit encryption only
Correct Answer
A: Always Encrypted with Secure Enclaves
Explanation
Always Encrypted with Secure Enclaves ensures that sensitive database columns remain encrypted at rest, in transit, and while being processed in memory on the database server.