Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

Symmetric encryption converts readable data into ciphertext using a secret key and can be reversed (decrypted) with the same key, meeting the requirement for confidentiality and recoverability. Hashing and salting create one-way digests that cannot be converted back to the original data and are intended for integrity or password storage, not confidentiality. Tokenization substitutes sensitive data with unrelated tokens without providing a built-in way to restore the original value from the token alone. Therefore, symmetric encryption is the only option that both protects the data and allows it to be restored to its initial state.