You manage a Microsoft SQL Server environment in a Microsoft Azure virtual machine.

You must enable Always Encrypted for columns in a database.

You need to configure the key store provider.

What should you do?

A. Manually specify the column master key.

B. Modify the connection string for applications.

C. Auto-generate a column master key.

D. Use the Windows certificate store.

Explanation:

Always Encrypted supports multiple key stores for storing Always Encrypted column master keys. A column master key can be a certificate stored in Windows Certificate Store.

References: https://msdn.microsoft.com/en-us/library/mt723359.aspx