A database contains highly sensitive fields that only a limited reviewer group should read, while other users may query ordinary columns. Which approach best fits?

1. Apply supported column-level access controls or policy tags.
2. Inspect data with Sensitive Data Protection and review classification findings.
3. Use supported row-level security with correctly scoped identities.
4. Use an appropriate deterministic pseudonymization or tokenization approach with controlled key access.