Question

You manage an on-premises SQL Server 2019 database that is protected with Transparent Data Encryption (TDE) using a database encryption key secured by a server certificate. You must restore a backup of this database onto a different SQL Server instance in your organization's disaster recovery site. When you attempt the restore on the new instance, the operation fails. What must you do first to allow the restore to succeed?

Accepted Answer

Restore the TDE server certificate (and its private key) from the source instance into the master database of the destination instance before restoring the database backup.

Answer

Disable TDE on the source database before creating the backup, then re-enable it after restoring on the destination instance.

Answer

Create a new database master key on the destination instance with the same password used on the source instance.

Answer

Enable Always Encrypted on the destination instance so it can read the encrypted backup file.