$4.$ Which scenario meets PCI DSS requirements for protecting databases containing cardholder data?$$

Cardholder data is stored using MD$2$ Hashing

User direct access to the database is restricted to system and network administrators

Cardholder data is stored using AES$-256$ encryption

Direct queries to the database are restricted to shared database administrators