Column-Level Database Encryption refers to encryption of what?

• A. Encrypting the entire database
• B. Encrypting data in transit
• C. Encrypting contents of a specific column in a database
• D. Encrypting user passwords

Answer: (C)

Column-level encryption protects the data stored in a single column within a table. It means only the contents of that specific column are encrypted—such as the cardholder data field in a row—while other columns remain unencrypted. This approach lets you shield sensitive fields without encrypting every piece of data or the entire database, and it often aligns with how PCI DSS requires protecting cardholder data.

Encrypting the entire database would be a broader, database-wide approach, not column-specific. Encrypting data in transit refers to securing data as it moves between systems (for example, with TLS). Encrypting user passwords is usually handled by hashing (often with a salt) rather than encrypting the stored value.