A database contains highly sensitive fields that only a limited reviewer group should read, while other users may query ordinary columns. Which approach best fits?

1. Use supported row-level security with correctly scoped identities.
2. Apply supported column-level access controls or policy tags.
3. Inspect data with Sensitive Data Protection and review classification findings.
4. Use an appropriate deterministic pseudonymization or tokenization approach with controlled key access.