What is the primary advantage of Dynamic Data Masking (DDM)?

• A. It changes the actual data in the database.
• B. It improves query performance.
• C. It limits data exposure by obscuring sensitive information in real time.
• D. It requires complex coding to implement.

Answer: (C)

Dynamic Data Masking protects sensitive information by masking data at query time for non-privileged users. It obscures the actual values in real time when results are returned, without changing the data stored in the database. This lets legitimate users see usable results while helping prevent accidental exposure for others. For example, a credit card or SSN might appear masked unless the user has explicit permission to unmask. This approach preserves data integrity and avoids any need to rewrite data or deploy complex logic.