A bank is migrating sensitive customer data to Azure. They require that the data be encrypted both at rest and in transit, and that they have full control over the encryption keys. Which services should be involved?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Azure SQL with TDE (BYOK) and Azure Key Vault

Transparent Data Encryption (TDE) with 'Bring Your Own Key' (BYOK) and Key Vault provides the required level of control and encryption....

๐Ÿ“‹Part of Microsoft Certified: Azure Fundamentals (AZ-900) ยท Azure Certification Practice
Real Exam ScenarioScenario Based

A bank is migrating sensitive customer data to Azure. They require that the data be encrypted both at rest and in transit, and that they have full control over the encryption keys. Which services should be involved?

โœ“ Correct Answer & ExplanationScenario Based

Correct Answer

Azure SQL with TDE (BYOK) and Azure Key Vault

Why This Answer Is Correct

Transparent Data Encryption (TDE) with 'Bring Your Own Key' (BYOK) and Key Vault provides the required level of control and encryption.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Scenario Based โ€” a core concept tested in Microsoft Certified: Azure Fundamentals (AZ-900). Understanding Scenario Based is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.