
Explanation:
Dynamic data masking helps prevent unauthorized access to sensitive data by enabling customers to designate how much of the sensitive data to reveal with minimal effect on the application layer.
https://learn.microsoft.com/en-us/azure/azure-sql/database/dynamic-data-masking-overview Always Encrypted is a feature designed to protect sensitive data, such as credit card numbers or national/regional identification numbers (for example, U.S. social security numbers), stored in Azure SQL Database, Azure SQL Managed Instance, and SQL Server databases.
https://learn.microsoft.com/en-us/sql/relational-databases/security/encryption/always-encrypted-database-engine