Question 310
An encryption team rotates a column master key but app clients still use outdated metadata. Which technical action BEST resolves the primary problem?
Explanation
Correct Answer
Perform supported key rotation and client configuration changes as a coordinated migration. This targets the primary issue because column key hierarchy and client metadata must agree for encrypted column access. Verification: Authorized clients read/write after rotation and revoked keys no longer work. Prevent recurrence: Rehearse key recovery and avoid distributing keys in scripts.
Incorrect Answers
Randomized encryption does not support general plaintext pattern matching inside the engine.
High-volume blanket logging can impact throughput and reveal sensitive inputs.
RLS enforces row filtering in the database rather than relying on every query to remember a filter.