Describe Azure data encryption
This section will discuss the protection of data through the different encryption options within Azure for encrypting data at rest. This will include encryption key management and other features that are included with Azure Key Vault. There are three types of encryption services within Azure; they are Storage Service Encryption (SSE), Azure Disk Encryption (ADE), and Transparent Data Encryption (TDE). The following sections will describe the use of each of these.
Describe Storage Service encryption
Storage Service Encryption (SSE) is the encryption service within Azure storage accounts for encrypting data at rest. SSE is turned on by default for all objects and files that are saved within a storage account container or file share. When creating a storage account within Azure, SSE with Microsoft-managed keys is turned on and encryption keys are created for the storage account. These storage account encryption keys can be located and viewed on the...