A famous fintech startup is setting up its data solution using Azure Synapse analytics. As part of compliance, the details like credit card numbers shouldn`t be exposed, while the frontline support should be able to verify the customer identity using the last 4 digits of the credit card. Which of the following is best suited in this scenario?

Answer options:

A.Firewall rules to block IP
B.Row-level security
C.Column-level security
D.Data Masking

Correct Answer: D 
A very common technique is used to hide PII or give access only to parts of it. Data masking will help block access to specific fields of data. In this case, the first 12 characters of credit card numbers can be masked, and the last four can be used for verification.
Option A is incorrect: Firewall block will completely block access to the database.
Option B is incorrect: It will help in limiting access to row only.
Option C is incorrect: It will help in limiting access to a particular column only.
Option D is correct: It is a storage option.
Reference: 
To know more, please refer to the docs below: 

https://docs.microsoft.com/en-us/sql/relational-databases/security/dynamic-data-masking?view=sql-server-ver15#:~:text=Dynamic%20data%20masking%20(DDM)%20limits,it%20to%20non-privileged%20users.&text=Dynamic%20data%20masking%20helps%20prevent,impact%20on%20the%20application%20layer