CND Application And Data Protection Practice Question

An enterprise database administrator is configuring Microsoft SQL Server Always On Availability Groups and needs to ensure that database traffic transmitted between replicas across the network is encrypted. Which configuration setting must be enabled?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Configure the Availability Group Endpoint with ALTER ENDPOINT hadr_endpoint FOR DATABASE_MIRRORING (ENCRYPTION = REQUIRED)

Availability group endpoints must be configured with ENCRYPTION = REQUIRED or SUPPORTED using ALTER ENDPOINT to secure replication traffic across nodes.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Run sp_configure 'enforce network encryption', 1; on the master instance
Why it's wrong here
sp_configure does not contain an 'enforce network encryption' option for availability group endpoints.
✗
Set the database compatibility level to 150 and enable Always Encrypted with secure enclaves
Why it's wrong here
Always Encrypted protects column data against direct database administrator inspection, not network transport replication.
✗
Enable Transparent Data Encryption (TDE) on the primary replica database
Why it's wrong here
TDE encrypts data at rest on disk, not data in transit across network replication links.
✓
Configure the Availability Group Endpoint with ALTER ENDPOINT hadr_endpoint FOR DATABASE_MIRRORING (ENCRYPTION = REQUIRED)
Why this is correct
HADR database mirroring endpoints must be explicitly configured with encryption required to secure data in transit between replicas.

About these practice questions

Courseiva writes every CND question from scratch — 323 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Written and reviewed by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

Last reviewed August 2026 · checked against the official EC-Council exam blueprint

Ready to practise?

Turn this into a habit — start a practice session.

Start practice session

Timed practice sets

Quick scored rounds with instant marking and a written explanation per question.

CND Practice Test 1 — 25 Questions→Free CND Practice Test 3 — 30 Questions→

Domain-focused practice

Each domain maps to a weighted exam section. Focus on the domain where you are weakest.

Application And Data Protection Network Attacks And Defense Strategies Endpoint Protection

Practice by question type

Practise one question format at a time: exhibits, multi-select, drag-and-drop, troubleshooting.

Browse scenarios

Practice by topic

Each topic page collects the questions that test one concept, plus the theory behind it.

Application And Data Protection practice questions Enterprise Cloud Virtual And Wireless Network Protection practice questions Network Security Controls Protocols And Devices practice questions Network Perimeter Protection practice questions CND fundamentals practice questions

Keep going

All CND questions Study guide CND practice test

This CND practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CND exam.