Microsoft Certified: Azure Fundamentals (AZ-900) Practice Exam

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for your Microsoft Certified: Azure Fundamentals (AZ-900) Exam. Study with flashcards and multiple choice questions, each question comes with hints and explanations. Ace your exam!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


What helps protect Azure SQL Database and Azure Data Warehouse against the threat of malicious activity?

  1. Transparent Data Encryption (TDE)

  2. Azure Storage Service Encryption

  3. Azure Disk Encryption

  4. All of the above

The correct answer is: Transparent Data Encryption (TDE)

The correct answer is the option that emphasizes Transparent Data Encryption (TDE). TDE is specifically designed to protect Azure SQL Database and Azure Data Warehouse from malicious activities by encrypting the data at rest. This ensures that sensitive information is safeguarded, even if unauthorized access to the underlying storage occurs. TDE helps to mitigate risks of data breaches and compliance violations by protecting the databases without requiring extensive application changes. While other options also provide significant encryption benefits within Azure, they are not as directly tied to the protection of Azure SQL Database and Azure Data Warehouse specifically against malicious activity. Azure Storage Service Encryption is aimed at Azure Storage accounts, while Azure Disk Encryption pertains primarily to virtual machines. Therefore, although all these encryption methods contribute to a secure Azure environment, TDE is uniquely focused on SQL databases, making it the most relevant answer regarding the protection of Azure SQL Database and Azure Data Warehouse from threats specifically tied to data breaches.