What should you do?

You manage a Microsoft SQL Server environment in a Microsoft Azure virtual machine.

You must enable Always Encrypted for columns in a database.

You need to configure the key store provider.

What should you do?
A . Manually specify the column master key.
B . Modify the connection string for applications.
C . Auto-generate a column master key.
D . Use the Windows certificate store.

Answer: D

Explanation:

Always Encrypted supports multiple key stores for storing Always Encrypted column master keys. A column master key can be a certificate stored in Windows Certificate Store.

References:https://msdn.microsoft.com/en-us/library/mt723359.aspx