Encryption at rest protects data stored on disk.
Finance and Operations uses:
SQL Server Transparent Data Encryption (TDE)
Azure Storage encryption
Microsoft-managed encryption keys