Exam MS-900 topic 1 question 239 discussion

The two ways that you can ensure data security in Microsoft 365 are: A. Service-level encryption using customer-provided key: This ensures that data is encrypted when it's at rest or in transit between datacenters. The customer has full control over the encryption keys used to secure their data, ensuring that only authorized parties can access it. D. Data transfer using transport-layer security (TLS): This ensures that data is encrypted when it's in transit between devices and servers. TLS is used to secure data transfer in many protocols, including HTTP, SMTP, and FTP. By using TLS, you can protect against eavesdropping, tampering, and message forgery. Note that options B and C are not correct because Microsoft Azure AD encryption is not customer-provided and single-tenant infrastructure partitions are not related to data security.

i think it is A and B as TLS is by default for every clients tools and we the admin cannot change this. Except if we talk about mail flow...

This is about data at rest and in transit being encrypted so A and D are the answers

I agree with this A and D https://docs.microsoft.com/en-us/azure/security/fundamentals/encryption-overview