What encryption is used in Fabric for data at rest and in transit?

• A. Encryption is only applied at rest using platform-managed keys.
• B. Encryption is only applied in transit.
• C. Encryption is not used in Fabric.
• D. Data is encrypted at rest and in transit using platform-managed keys or customer-managed keys (CMEK) where available, along with TLS for in-flight encryption.

Answer: (D)

Fabric protects data both when it is stored and when it moves. For data at rest, the service encrypts stored data using keys managed by the platform by default, and you can opt to use your own keys through customer-managed keys (CMEK) where the service supports it, giving you control over key lifecycle and access. For data in transit, all network traffic is encrypted with TLS, safeguarding information as it travels between clients and service components. CMEK availability varies by component and region, but when supported, it provides added control while TLS handles in-flight encryption. This combination is why the best answer describes encryption at rest and in transit with platform-managed or customer-managed keys (where available) plus TLS for in-flight encryption.