問題文
A regulated customer must hold one of the keys that protect their data so that revoking it makes the data unreadable. Which capability addresses that?
選択肢
- A masking policy on every sensitive column, because masking removes the need to control the encryption key for the data.
- Periodic rekeying, which re-encrypts the data under a key that the customer supplies at the time of each rekeying operation.
- The arrangement in which a customer-managed key in the cloud provider's key service is combined with the Snowflake-maintained key to form the composite key.
- Client-side encryption on an external stage, with the requirement met by keeping the plaintext outside Snowflake at every single point.