TAILIEUCHUNG - The Real MTCS SQL Server 2008 Exam 70/432 Prep Kit- P42

The Real MTCS SQL Server 2008 Exam 70/432 Prep Kit- P42: Congratulations on your journey to become certified in SQL Server 2008. This book will help prepare you for your exam and give you a practical view of working with SQL Server 2008. | Managing Data Encryption Chapter 5 187 Exam Objectives Frequently Asked Questions Q What is DPAPI and how is it used in TDE architecture A DPAPI Data Protection Application Programming Interface is a set of cryptographic program interface introduced with Microsoft Windows 2000 and later Microsoft Windows operating systems. The API consists of two functions CryptProtectData used to encrypt data and CryptUnprotectData to decrypt data . DPAPI is the top level of the TDE encryption hierarchy and is used by SQL Server to protect the service master key SMK for the database instance. In TDE the SMK is used to protect the next level of the SQL Server encryption hierarchy specifically the database master key DMK and is stored in the master database. The last encryption level for TDE is the database encryption key DEK . Using a certificate created for the DMK the DEK is encrypted using the DMK certificate from the master database and then stored in the specified user database. Q What is Transparent Data Encryption A Transparent Data Encryption TDE provides the ability to encrypt entire databases data and log files without the requirement of application changes and with minimal performance impact. a n _ J I I Q What edition of SQL Server is required to use TDE A TDE is only available on SQL Server 2008 Enterprise and Developer editions. Q When is the Service Master Key created A The SMK is created during SQL Server setup of the instance. It uses the DPAPI and the SQL Server service credential to generate the SMK. Q What is the Service Master Key used for A The SMK is at the core of SQL Server encryption. An SMK is generated on a SQL Server instance when an instance is first started. The SMK is used to encrypt various components on the database instance including linked server passwords database master keys and credentials. The SMK is encrypted by using the local computer. By default the SMK is created by the Windows service account using the Windows data protection API and .

TAILIEUCHUNG - Chia sẻ tài liệu không giới hạn
Địa chỉ : 444 Hoang Hoa Tham, Hanoi, Viet Nam
Website : tailieuchung.com
Email : tailieuchung20@gmail.com
Tailieuchung.com là thư viện tài liệu trực tuyến, nơi chia sẽ trao đổi hàng triệu tài liệu như luận văn đồ án, sách, giáo trình, đề thi.
Chúng tôi không chịu trách nhiệm liên quan đến các vấn đề bản quyền nội dung tài liệu được thành viên tự nguyện đăng tải lên, nếu phát hiện thấy tài liệu xấu hoặc tài liệu có bản quyền xin hãy email cho chúng tôi.
Đã phát hiện trình chặn quảng cáo AdBlock
Trang web này phụ thuộc vào doanh thu từ số lần hiển thị quảng cáo để tồn tại. Vui lòng tắt trình chặn quảng cáo của bạn hoặc tạm dừng tính năng chặn quảng cáo cho trang web này.