フリー問題

問題文

The column master key protecting the serial number column must be rotated each year. The plant runs 24 hours a day. What should the team plan for?

選択肢

1. That rotating the column master key requires switching the column to randomized encryption first, because re-encrypting the column happens outside the database while T-SQL does not support cryptographic operations, and the deterministic form cannot survive being written back by a client that holds two generations of the key at once.
2. That the rotation can be issued as a single ALTER TABLE statement because the engine holds the key metadata.
3. That the rotation is unnecessary if the key is stored in a trusted key store outside the database system.
4. That re-encrypting the column happens outside the database because T-SQL does not support cryptographic operations, unless the team adopts secure enclaves, which can encrypt or re-encrypt columns in place without moving data out.