問題文
A hospital encrypts the national identification number column so that the database engine never sees plaintext. Analysts must still be able to run pattern matching and range comparisons against that column, and the team must be able to re-encrypt it later without moving the data out of the database. Which capability satisfies all of this?
選択肢
- Always Encrypted with secure enclaves, which processes encrypted data inside a protected memory area and supports in-place encryption.
- Always Encrypted without enclaves, using deterministic encryption for the column.
- Dynamic data masking on the column, with the analysts granted the permission to read unmasked values, because the mask leaves the column usable in pattern matching and range comparisons for those analysts.
- Transparent data encryption, because it encrypts the data at rest without changing queries.