You are deploying a new application on Azure VMs. The application must be encrypted at rest and during transmission. Which combination of features should you implement?