Enabling at-rest encryption for data extracts within Tableau Server's configuration settings Enabling at-rest encryption for data extracts within Tableau Server's configuration is essential for securing the data extracts stored on the server. This feature encrypts the extract files stored on the server, protecting sensitive data from unauthorized access, especially if the server's storage is compromised. Option A is incorrect as configuring a VPN tunnel addresses data in transit, not data at rest like extracts stored on the server. Option C is incorrect because a network intrusion detection system, while important for overall security, does not directly encrypt data extracts. Option D is incorrect as increasing storage capacity does not directly contribute to the encryption or security of data extracts.