Which statement regarding the Data At Rest Encryption feature (DARE) is correct?

Data At Rest Encryption (DARE) is a fundamental, system-wide security feature for a Hitachi Content Platform (HCP) cluster. It encrypts all object data stored on the internal drives of the storage nodes. Due to the architectural implications of encrypting the entire data set, this feature must be enabled when the system is first initialized. Once the cluster is configured and operational, DARE cannot be enabled or disabled. This decision is irreversible for the life of the cluster.

A. DARE is a system-level feature that applies to all data on the physical drives. It is not a granular setting that can be managed at the individual tenant level.

C. The DARE status cannot be changed after the initial setup. Enabling it "at any time" on a running system with unencrypted data is not a supported operation.

D. DARE is configured during the HCP software's cluster initialization process, which takes place after the underlying operating system has been installed on the nodes.

1. Hitachi Vantara Content Platform (HCP) Installation Guide (MK-92HCP019-xx): In the chapter covering system setup and initialization, the guide explicitly states, "You can enable data-at-rest encryption only during the initial system setup. You cannot enable it later." This confirms that the decision is locked in at the time of cluster configuration.

2. Hitachi Vantara Content Platform (HCP) Security Guide (MK-92HCP021-xx): The "Data-at-Rest Encryption" section details that DARE is a system-wide feature. It clarifies, "Data-at-rest encryption is either enabled or not enabled for the whole HCP system. You cannot enable it for some tenants or namespaces and not for others." This directly refutes the concept of tenant-level control.