Hotspot Question
You have an Azure subscription. The subscription contains an Azure SQL managed instance that stores employee details, including social security numbers and phone numbers.
You need to configure the managed instance to meet the following requirements:
- The helpdesk team must see only the last four digits of an employee's phone number.
- Cloud administrators must be prevented from seeing the employee's
social security numbers.
What should you enable for each column in the managed instance? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Dynamic data masking helps prevent unauthorized access to sensitive data by enabling customers to designate how much of the sensitive data to reveal with minimal effect on the application layer.
https://learn.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview Always Encrypted is a feature designed to protect sensitive data, such as credit card numbers or national/regional identification numbers (for example, U.S. social security numbers), stored in Azure SQL Database, Azure SQL Managed Instance, and SQL Server databases.
https://learn.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted- database-engine