Where is the encryption key stored when using ENABLECLIENTENCRYPTKEY for encryption?

Where is the encryption key stored when using ENABLECLIENTENCRYPTKEY for encryption?

A.
in the server database

B.
as part of the client backup

C.
on the server in an encrypted file

D.
on the client node in an encrypted file