A system administrator needs to ensure that sensitive customer data in fields is only accessible to specific roles within a ServiceNow instance. Which feature should be utilized?

Column Level Encryption (CLE), also known as field encryption, is the specific ServiceNow feature designed to encrypt data within individual fields (columns) of a table. Access to decrypt and view this data is controlled through encryption contexts, which are granted to specific user roles. This directly addresses the requirement of making sensitive field-level data accessible only to authorized roles, ensuring granular control over data visibility.

A. PI1 Encryption: "PII Encryption" is a use case or a concept, not a specific ServiceNow feature name. CLE is the feature used to implement the encryption of Personally Identifiable Information (PII).
C. Cloud Encryption: This encrypts the entire database at rest. It does not provide the granular, role-based access control for specific fields that the scenario requires.
D. Full Disk Encryption (FDE): This operates at the physical storage layer, encrypting the entire disk. It offers no application-level control over who can see specific data fields within the ServiceNow instance.

ServiceNow Product Documentation, "Column Level Encryption Enterprise." The overview states, "Column Level Encryption Enterprise provides encryption for a field... You can grant access to view or edit encrypted fields by creating encryption contexts and assigning them to user roles."