You are a Microsoft 365 administrator for a company.
What are two ways that you can ensure data security? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
A. service-level encryption using customer-provided key
B. tenant-dedicated Microsoft Azure AD encryption using customer-provided key
C. single-tenant infrastructure partitions for sensitive data
D. data transfer using transport-layer security (TLS)
https://docs.microsoft.com/en-us/microsoft-365/compliance/customer-key-set-up?view=o365-worldwide#:~:text=With%20Customer%20Key%2C%20you%20control,to%20them%2C%20with%20their%20keys.
With Customer Key, you control your organization’s encryption keys and then configure Microsoft 365 to use them to encrypt your data at rest in Microsoft’s data centers.
https://docs.microsoft.com/es-es/azure/security/fundamentals/data-encryption-best-practices
Protecting data in transit should be an essential part of your data protection strategy. Because data is moving back and forth from many locations, we generally recommend that you always use SSL/TLS protocols to exchange data across different locations.