"Is your data encrypted at rest?" arrives from an auditor, a customer security review, or a regulator, and it sounds like a yes-or-no question.
It isn't. The honest answer depends on which layer someone chose to encrypt at, often years ago, and on whether that choice covered everything the data touches.