Which permission should you grant?

You manage a Microsoft SQL Server environment. You implement Transparent Data Encryption (TDE).

A user will assist in managing TDE.

You need to ensure that the user can view the TDE metadata while following the principle of lease privilege.

Which permission should you grant?
A . DDLAdmin
B . db_datawriter
C . dbcreator
D . dbo
E . View Database State
F . View Server State
G . View Definition
H . sysadmin

View Answer

Answer: G

Explanation:

Viewing the metadata involved with TDE requires the VIEW DEFINITION permissionon the certificate.

References: https://docs.microsoft.com/en-us/sql/relational-databases/security/encryption/transparent-dataencryption-tde