Which two columns should use randomized encryption?

You are configuring a table to use the Always Encrypted feature.

The table will have the columns configured as shown in the following table.

All the columns will be encrypted by using the AEAD_AES_256_CBC_HMAC_SHA_256 algorithm. Values will be stored in the most secure way possible.

Which two columns should use randomized encryption? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.
A . Address
B . Tax Id
C . LastNaMe
D . Gender

View Answer

Answer: AD

Explanation:

Always Encrypted supports two types of encryption: randomized encryption and deterministic encryption. Randomized encryption uses a method that encrypts data in a less predictable manner. Randomized encryption is more secure, but prevents searching, grouping, indexing, and joining on encrypted columns.

References: https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted-database-engine?view=sql-server-2017