Question

You administer an Azure SQL Database that stores customer records. A compliance team requires that columns holding national ID numbers and email addresses be discovered, labeled by sensitivity, and that access to these columns be visible in audit reports so that queries touching sensitive data can be reviewed. You want to accomplish this with minimal custom development. Which feature should you implement?

Accepted Answer

SQL Data Discovery & Classification, applying information type and sensitivity labels to the columns

Answer

Dynamic Data Masking rules on the national ID and email columns

Answer

Row-Level Security with a filter predicate function on the customer table

Answer

Transparent Data Encryption with a customer-managed key