問題文
A company must ensure that a sales representative sees only the rows for their own region even when they query the base table directly with a reporting tool. Which mechanism meets that requirement?
選択肢
- A masking policy on the region column, because masking the region prevents rows from other regions from being returned.
- A row access policy attached to the table, because the policy is evaluated on every reference to that table regardless of the path taken to it.
- A network policy per region, so that a representative's session is restricted to the addresses of their own office and therefore to their own rows.
- A secure view that filters rows by region, and revoking SELECT on the base table so that the reporting tool has no other route to the rows that it needs.