The correct option is Encrypt=True.

Setting Encrypt=True in the connection string tells the client driver to use TLS so that the application connects over an encrypted channel. This is the parameter that requests encryption for the transport layer when connecting to Azure SQL Database and other SQL Server endpoints.

TrustServerCertificate=True is not the right choice because it only controls whether the client validates the server certificate. That option does not by itself request encryption and turning it on can weaken security by allowing an untrusted certificate to be accepted.

Encrypt=False is incorrect because it explicitly disables encryption and would not meet the requirement for encrypted connections from the application.

Integrated Security=True is incorrect because it relates to authentication using Windows credentials and has nothing to do with whether the connection is encrypted.

Full AWS Practitioner Certification Question