You manage a Microsoft SQL Server environment in a Microsoft Azure virtual machine.
You must enable Always Encrypted for columns in a database.
You need to configure the key store provider.
What should you do?

A.
Manually specify the column master key.

B.
Modify the connection string for applications.

C.
Auto-generate a column master key.

D.
Use the Windows certificate store.

Explanation:
Always Encrypted supports multiple key stores for storing Always Encrypted column master keys. A column
master key can be a certificate stored in Windows Certificate Store.
https://msdn.microsoft.com/en-us/library/mt723359.aspx