A regulated SQL application needs investigation records of access plus modified sensitive values hidden from selected routine users. Which mechanisms match those distinct needs?

Choose the single best answer.

A.Always Encrypted alone as a complete access-audit and user-display policy
B.Auditing for investigative access/change records and dynamic masking for selected users' displayed values
C.TDE alone for both access records and user-specific display
D.PITR backups used instead of access auditing and display controls

Show the answer and explanation

✓ Correct answer

Auditing for investigative access/change records and dynamic masking for selected users' displayed values

Auditing records activity and dynamic masking changes selected users' displayed values without becoming encryption. TDE addresses data at rest; Always Encrypted protects eligible client-encrypted values; PITR restores past database state. Those mechanisms do not by themselves supply the requested audit trail plus display policy. Source guide: PDF page 25.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.