A customer requires encryption at rest on every node root volume.
In this scenario, which two encryption solutions will fulfill this requirement? (Choose two.)
A customer requires encryption at rest on every node root volume.
In this scenario, which two encryption solutions will fulfill this requirement? (Choose two.)
To fulfill the requirement of encryption at rest on every node root volume, NVE (NetApp Volume Encryption) and NSE (NetApp Storage Encryption) are appropriate choices. NVE provides encryption at the volume level, while NSE includes encryption at the disk level. IPsec is not applicable here, as it is a protocol used to secure IP communications. NAE (NetApp Aggregate Encryption) does not specifically guarantee encryption of the root volume (vol0), making it an unsuitable choice for this requirement.
Should be NVE and NSE , NAE - aggregate is not supported controller- root volume encryption https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/What_data_is_encrypted_with_NetApp_Volume_Encryption_(NVE)_and_NetApp_Aggregate_Encryption_(NAE)#:~:text=For%20NVE%2C%20data%20volumes%2C%20specifically,(vol0)%20can%20be%20encrypted https://docs.netapp.com/us-en/ontap/encryption-at-rest/enable-root-volume-encryption-task.html
Question states: "A customer requires encryption at rest on every node root volume." NAE would encrypt all volumes, which is not a requirement per the question. Going with A & D
https://kb.netapp.com/onprem/ontap/dm/Encryption/What_data_is_encrypted_with_NetApp_Volume_Encryption_(NVE)_and_NetApp_Aggregate_Encryption_(NAE) Controller root volumes (vol0) are not encrypted with NAE.