Azure key Valut and Windows certificate store

Question

Hello Team,

I am Practice the test paper for DP -200. For single question there are 2 answers in 2 differenct Practice Test Paper.

Paper 1 :

The data for the external applications needs to be encrypted at rest. You decide to implement the following steps

*)Use the Always Encrypted Wizard in SQL Server Management Studio

*)Select the column that needs to be encrypted

*)Set the encryption type to Deterministic

*)Configure the master key to be used from the Windows Certificate Store

*)Confirm the configuration and deploy the solution

Would these steps fulfill the requirement?

Answer : YES

Paper 2 :

The data for the external applications needs to be encrypted at rest. You decide to implement the following steps

*)Use the Always Encrypted Wizard in SQL Server Management Studio

*)Select the column that needs to be encrypted

*)Set the encryption type to Deterministic

*)Configure the master key to be used from Azure Key vault

*)Confirm the configuration and deploy the solution

Would these steps fulfil the requirement?

Answer :No

Please any one can you clarify what is the correct answer for Azure key Vault/Windows Certificate Store

Thanks in advance
RK

Answer 1

anonymous user

Looking at the question you posted, the main difference is one says "Configure the master key to be used from the Windows Certificate Store" while the other says Key Vault. I was able to look at the public documentation and will post my findings below.

Findings:

When it comes to the actual process of using the "Always Encrypted Wizard in SQL Server Management Studio".

• This documentation states "Currently, you can store a CMK in the Windows certificate store, Azure Key Vault, or a hardware security module (HSM). However, within our docs only the Certificate Store walk-through documents the full process; while the Key Vault doc only goes to creating a Key Vault to store your keys.

For your test questions, it looks like both answers should be Yes/True.

When taking the actual exam, if you do run into these questions and would like to challenge the item(s). Please do so by following the steps outlined here - Exam policies and FAQ.

----------

If this answer helped resolve your question. Please remember to "mark as answer" so that others in the community facing similar issues can easily find a solution.