HOTSPOT (Drag and Drop is not supported)
A company is implementing Dynamics 365 Finance.
The company is concerned that the encryption of data between the application server and the browser might be used to access the application.
You need to recommend what the company should do to increase the security of the data during transmission.
Which security components should you recommend the company use? To answer, select the appropriate options in the answer areA.
NOTE: Each correct selection is worth one point.

- See Explanation section for answer.
Answer(s): A
Explanation:

Box 1: Microsoft SQL Server Transparent Data Encryption
Configure the connection
Encryption in finance and operations apps
Note: Encryption at rest
Microsoft uses encryption technology to protect customer data while at rest in an environment's SQL Server database and Azure Storage.
All instances utilize *Microsoft SQL Server Transparent Data Encryption (TDE)* and Azure Storage encryption to perform real-time encryption of data when written to the disk at rest.
Finance and operations apps use server-side encryption using service-managed keys. All key management aspects such as key issuance, rotation, and backup are handled by Microsoft.
Box 2: Configuration Key
Add to the configuration in Dynamics 365 Finance
Customers have data privacy and compliance requirements to secure their data by encrypting their data at-rest. This secures the data from exposure in an event where a copy of the database is stolen. With data encryption at-rest, the stolen database data is protected from being restored to a different server without the encryption key.
All customer data stored in Power Platform is encrypted at-rest with strong Microsoft-managed encryption keys by default. Microsoft stores and manages the database encryption key for all your data so you don't have to. However, Power Platform provides this customer-managed encryption key (CMK) for your added data protection control where you can self-manage the database encryption key that is associated with your Microsoft Dataverse environment. This allows you to rotate or swap the encryption key on demand, and also allows you to prevent Microsoft's access to your customer data when you revoke the key access to our services at any time.
Note:
The manage keys feature in the Power Platform Administration Center gives administrators the ability to self-manage the database encryption keys that are associated with instances of Dynamics 365.
The key management feature takes the complexity out of encryption key management by using Azure Key Vault to securely store encryption keys. Azure Key Vault helps safeguard cryptographic keys and secrets used by cloud applications and services. The key management feature doesn't require that you have an Azure Key Vault subscription and for most situations there is no need to access encryption keys used for Dynamics 365 within the vault.
Reference:
https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/sysadmin/encryption
https://learn.microsoft.com/en-us/power-platform/admin/customer-managed-key
Reveal Solution Next Question