dp-203 Practice Question 1951
Exam: dp-203
Domain: Design and implement data security
Topic: Design and implement data policies and standards
Difficulty: medium
In a scenario where you need to ensure that sensitive customer data is protected while still allowing access for authorized personnel, which of the following approaches should you use to mask the data in Azure SQL Database?
Answer Options
A
Implement full database encryption using Always Encrypted.
B
Use column-level data masking to control who can see the data and what they can see.
C
Apply data redaction to all sensitive columns.
D
Enable Transparent Data Encryption (TDE) on the SQL Server.
Correct Answer
B: Use column-level data masking to control who can see the data and what they can see.
Explanation
Column-level data masking allows you to control who can see the actual data and what they can see. It is a granular approach that can be applied at the column level, ensuring that only authorized users can view the masked data. Other options like full database encryption or data redaction might not provide the same level of control over who sees the data and what they see.