Your company has an Azure SQL database. The database also consists of sensitive data. You want the prevent sensitive data from appearing as plain text inside the database system. What would be your…

Dynamic Data Masking (DDM) obscures sensitive data in query results for non-privileged users, but the data is still stored as plain text in the database.

Advanced Data Security (ADS) is a suite of features including vulnerability assessment and threat detection, but it doesn't directly prevent sensitive data from being stored as plain text within the database.

Always Encrypted ensures that sensitive data remains encrypted at rest, in transit, and during processing in the database system. Data is decrypted only by the client application, meaning the data is never seen in plain text by the SQL Database engine, database administrators, or other unauthorized users.

Transparent Data Encryption (TDE) encrypts the entire database's data files at rest, but the data is decrypted in memory for processing by the database engine, meaning it can be exposed as plain text within the database system itself.