Q17 Redis Domain 2 · 25–30% of exam

How should you configure Azure Cache for Redis to ensure data is encrypted at rest?

  1. A Enable TDE manually
  2. B Encryption at rest is enabled by default for all tiers (correct answer)
  3. C Configure CMK in Premium tier only
  4. D Use Redis AUTH for encryption

Shortcut: Azure Cache for Redis encrypts data at rest by default using platform-managed keys. Enterprise tier also supports customer-managed keys (CMK) via Azure Key Vault.