DP-300 Plan and implement data platform resources Practice Question

Correct answer & explanation

Always Encrypted is correct because it encrypts sensitive columns like credit card numbers at the client-side, ensuring the data remains encrypted at rest, in transit, and during processing. This prevents unauthorized users, including database administrators, from viewing the plaintext data, while authorized applications with the column encryption key can decrypt it transparently. Column-level security is also correct because it allows administrators to restrict access to specific columns (e.g., credit card numbers) by granting permissions only to authorized users or applications. This ensures that even if a user has access to the database, they cannot query the sensitive columns without explicit permission. Together, Always Encrypted provides encryption and Column-level security provides fine-grained access control, meeting all requirements.