thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Intermediate

Transparent Data Encryption (TDE)

Database feature that encrypts data and log files at rest without requiring application changes.

Definition

TDE encrypts database files on disk using a database encryption key protected by a certificate or key in a key store. It is available in SQL Server, Azure SQL (enabled by default), Oracle, and MySQL Enterprise. It does not protect data from authorized users or in memory.

Example

Azure SQL Database encrypts new databases with TDE using service-managed keys or customer-managed keys in Azure Key Vault.

Exam tip

TDE protects stolen database files and backups, not data queried by a compromised account.

Related terms