Which statement best describes the effect of Dynamic Data Masking on data storage?

• A. It masks data in real time without changing the underlying data.
• B. It permanently alters the data values.
• C. It duplicates data for masked views.
• D. It encrypts data at rest.

Answer: (A)

Dynamic Data Masking hides sensitive values as data is returned to the user, without changing what’s stored in the database. It sits in the data retrieval path and applies masking rules on the fly, so the actual stored values remain intact. That’s why the described effect is masking in real time without altering the stored data. It isn’t permanent; it doesn’t create duplicates of data for masked views, and it’s not encryption at rest. For example, a masked query might show only the last four digits of a phone number while the full number stays securely stored in the table.