A sensitive database needs its cryptographic integrity upheld. Which of the following controls meets this goal? (Select TWO).

Data signing applies cryptographic hash functions and digital signatures to database records, ensuring that any unauthorized modification to the data produces a detectable mismatch between the stored signature and the current record hash, directly satisfying the cryptographic integrity requirement.

Encryption protects data confidentiality by making records unreadable to unauthorized parties but does not by itself detect or prevent unauthorized modification of the encrypted or decrypted data.

Perfect forward secrecy is a property of key exchange protocols that protects past session keys from future compromise; it is not a mechanism for verifying or maintaining database record integrity.

Steganography conceals the existence of data within other media; it provides no mechanism for detecting or preventing unauthorized modification of database records.

Data vaulting refers to secure offline storage or backup; it protects against data loss but does not provide cryptographic integrity verification of live database records in use.

Role-Based Access Control (RBAC) enforces the principle of least privilege by restricting which users can read, write, or modify database records, preventing unauthorized alterations that would undermine data integrity at the access control layer.

Lock and key is a physical or generic logical access control metaphor, not a specific cryptographic integrity control that can be applied to database records.