Which feature enables applying a masking policy to a column for column‑level security?

• A. Dynamic Data Masking
• B. External Tokenization (ALTR!)
• C. Row-Level Security
• D. Column Obfuscation

Answer: (A)

Masking a column for column-level security is provided by dynamic data masking. You define a masking policy that specifies how data should appear to different users and attach that policy to the column. When a query runs, the policy is evaluated at runtime, so authorized users may see the full value while others see a masked version. This keeps the underlying data intact while controlling visibility at the column level. External tokenization would replace data with tokens via an external service, which is a different approach; row-level security filters which rows are visible rather than how a column's value is presented; and column obfuscation isn’t the mechanism used to apply per-column masking policies in this context.