DP-420 Exam Dumps : Designing and Implementing Cloud-Native Applications Using Microsoft Azure Cosmos DB

You can use the Set-AzCosmosDBAccountRegion cmdlet to update the regions that an Azure Cosmos DB account uses. You can use this cmdlet to add a region or change the region failover order.  The cmdlet requires a resource group name, an Azure Cosmos DB account name, and a list of regions in desired failover order 1 .

For your scenario, based on the PowerShell command, you are using the Set-AzCosmosDBAccountRegion cmdlet to update the regions for an Azure Cosmos DB account named account1 that is configured for automatic failover. The command specifies two regions: West US and East US. The effect of running the command is that  the account will be configured for multi-region writes .

Multi-region writes is a feature of Azure Cosmos DB that allows you to write data to any region in your account and have it automatically replicated to all other regions. This feature provides high availability and low latency for write operations across multiple regions.  To enable multi-region writes, you need to specify at least two regions in your account and set them as write regions 2 . In your command, you are setting both West US and East US as write regions by using the -IsZoneRedundant parameter with a value of $true for both regions.

Box 1 = Randomized

Box 2 = Deterministic

Always Encrypted for Az ure Cosmos DB supports two types of encryption: deterministic and randomized 1 . Deterministic encryption always produces the same encrypted value for any given plain text value. Randomized encryption produces a different encrypted value for the same plain text value.

For dateOfBirth, randomized encryption is the strongest type of encryption because it provides better protection against statistical analysis and brute-force attacks.  Deterministic encryption would not be suitable for dateOfBirth because it could r eveal patterns or allow equality comparisons 1 .

For healthStatus, deterministic encryption is the strongest type of encryption because it allows queries to perform equality comparisons and filters on the encrypted prop erty.  Randomized encryption would not be suitable for healthStatus because it would prevent any queries on the encrypted property 1 .