What is the primary advantage of Dynamic Data Masking (DDM)?

• A. It changes the actual data in the database.
• B. It requires complex coding to implement.
• C. It eliminates the need for encryption.
• D. It limits data exposure by obscuring sensitive information in real time.

Answer: (D)

Dynamic Data Masking protects sensitive information by masking data in query results as they’re delivered to the user. The main advantage is limiting data exposure in real time without changing the data stored in the database. Because masking happens at runtime based on who’s viewing the data, authorized users can see the full values, while others see redacted or partial values. This lets you safely share data for development, testing, or analytics without rewriting applications or moving data, and it avoids encryption overhead and key management. In short, it shields privacy at the presentation layer while keeping the underlying data intact. The other options don’t fit because masking doesn’t alter stored data, doesn’t require heavy coding, and isn’t encryption.