Which Azure feature ensures all data is encrypted at rest?

Azure Key Vault is a service that securely stores and manages cryptographic keys, secrets, certificates, and other sensitive information. It is crucial for ensuring data at rest encryption because it manages the encryption keys used by various Azure services (like Storage Accounts, SQL Database, etc.) to encrypt their data. By centrally managing these keys, Key Vault helps maintain the security and integrity of encrypted data. Azure Monitor is for collecting, analyzing, and acting on telemetry data from your Azure and on-premises environments, not for encryption. Azure Blob Lifecycle Management helps manage the tiering and expiration of blob data, not its encryption. Azure Load Balancer distributes incoming network traffic across multiple backend resources, which is unrelated to data encryption.