- No—Always Encrypted is a feature of Azure SQL Database and SQL Server, which encrypts data that is stored in a database table.
- Yes—you can use the Key Vault API to create a self-signed certificate.
- No—all Azure storage services support server-side encryption at rest. This also includes Queue Storage.
Get Microsoft Azure Architect Technologies: Exam Guide AZ-300 now with O’Reilly online learning.
O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.