A new tenant is being onboarded to an SDX-secured environment. The security team requires that data protection be automatically configured during environment setup, with data secured both while it is being moved between services and while it resides on disk. Which SDX capabilities directly satisfy this prerequisite?