Note: This questions is part of a series of questions that use the same or similar answer choices. An
answer choice may be correct for more than one question in the series. Each question is independent
of the other questions in this series. Information and details provided in a question apply only to that
question.
You manage on-premises and Microsoft Azure SQL Database instances for a company. Your environment
must support the Microsoft SQL Server 2012 ODBS driver.
You need to encrypt only specific columns in the database.
What should you implement?

A.
transport-level encryption

B.
cell-level encryption

C.
Transparent Data Encryption

D.
Always Encrypted

E.
Encrypting File System

F.
BitLocker

G.
dynamic data masking

Explanation:
To encrypt columns you can configure Always Encrypted.
SQL Server Management Studio (SSMS) provides a wizard that helps you easily configure Always Encrypted by
setting up the column master key, column encryption key, and encrypted columns for you.
Always Encrypted allows client applications to encrypt sensitive data and never reveal the data or the encryption
keys to SQL Server or Azure SQL Database. An Always Encrypted enabled driver, such as the ODBC Driver
13.1 for SQL Server, achieves this by transparently encrypting and decrypting sensitive data in the client
application.
Note: The ODBC driver automatically determines which query parameters correspond to sensitive databasecolumns (protected using Always Encrypted), and encrypts the values of those parameters before passing the
data to SQL Server or Azure SQL Database. Similarly, the driver transparently decrypts data retrieved from
encrypted database columns in query results.
https://docs.microsoft.com/en-us/azure/sql-database/sql-database-always-encrypted-azure-keyvault#encrypt-columns-configure-always-encrypted
https://msdn.microsoft.com/en-us/library/mt637351(v=sql.110).aspx