Microsoft Certified: Azure Fundamentals (AZ-900) Practice Exam

What method is primarily used for encrypting data at rest in Azure?

1. A Client-side encryption

2. B Azure Storage Service Encryption (SSE)

3. C Both

4. D None of the above

The correct answer is: B Azure Storage Service Encryption (SSE)

Azure Storage Service Encryption (SSE) is the correct answer because it is the built-in encryption feature provided by Azure that automatically encrypts data before it is written to storage and decrypts it when accessed. SSE is designed to protect data at rest and helps organizations meet compliance and regulatory requirements. It operates seamlessly within Azure, requiring no additional management or actions from the user once encryption is enabled. Client-side encryption, while also a valid encryption method, involves the user encrypting the data before it is uploaded to Azure. This means that the responsibility for managing the encryption keys and processes falls on the user, which differs from the automated approach of SSE. Therefore, while both methods are utilized in Azure environments, SSE is the primary method supported out of the box for encrypting data at rest across the Azure platform.