To restrict access to a column (SSN) so that payroll employees can see it and others cannot, which feature should be used?

• A. RLS
• B. SSO
• C. OLS
• D. PLS

Answer: (D)

Column-level access control is needed when you want to restrict access to a specific data field, not the entire row or table. Row-Level Security would hide or show entire rows, which doesn’t target a single column like SSN. Authentication methods (like SSO) verify identity but don’t control how much data a user can view. Blocking access at the object level would keep or remove access to the whole object (the table), which would either expose the column to everyone or hide it from everyone, not give selective visibility. Policy-Level Security provides per-column data policies, letting you specify who can read the sensitive column while allowing others to access the rest of the data. So, this approach best fits the need to let payroll see the SSN while restricting it for others.