Which two software-based data-at-rest encryption types are supported by NetApp ONTAP software?

• A. TLS
• B. self-encrypting drives (SEDs)
• C. NetApp Aggregate Encryption (NAE)
• D. NetApp Storage Encryption (NSE)

Answer: (C)

Data-at-rest encryption in ONTAP can be implemented in software in two forms: aggregate-level encryption and storage-layer encryption. NetApp Aggregate Encryption encrypts data at rest inside an aggregate, using keys managed by ONTAP. This is a software-based approach that protects all data written to the disks within that aggregate without requiring self-encrypting drives, and it supports key rotation and easy enable/disable without touching the drives. TLS and SEDs don’t represent software-based at-rest encryption: TLS protects data in transit, and self-encrypting drives use hardware-based encryption. NetApp Storage Encryption is the other software-based option, but the question highlights the aggregate-level method, which is NetApp Aggregate Encryption.