You have a Microsoft 365 subscription with Microsoft 365 E5 licenses, and manage your devices in Endpoint Manager. Your devices consist of a mix of Windows 10 and MacOS devices. You now want to encrypt your MacOS devices. What should you configure?

Answer options:

A.Bitlocker
B.Azure Storage Service Encryption
C.Always Encrypted
D.FileVault

Correct Answer: D 
FileVault is macOS’s built-in disk encryption feature. Encryption is done by using 128-bit AES encryption with a 256-bit key.. Configure FileVault by setting up an Endpoint Security - Disk encryption policy. 

Option A is incorrect. Bitlocker is used to encrypt Windows 10 Devices 
Option B is incorrect. Azure Storage Service Encryption used to encrypt Azure storage accounts ; Azure Blob storage and Azure file shares
Option C is incorrect. Always Encrypted is used for encrypting Azure SQL data
Reference: 
To know more about encrypting MacOS, please refer to the link below: 

https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-protection-macos