Which NetApp feature provides volume-level encryption for data at rest?

NetApp Volume Encryption (NVE) is a software-based feature in ONTAP that provides granular, volume-level encryption for data at rest. It encrypts all data within a volume, including all snapshots of that volume. NVE uses a unique XTS-AES-256 key for each volume, ensuring data is secure even if a disk is removed from the system. This feature can be enabled on new or existing volumes (via a volume move) and is managed through an onboard or external key manager.

A. NetApp SnapLock is a WORM (Write Once, Read Many) feature for data retention and compliance, not a general-purpose encryption technology.

C. FabricPool is a data tiering technology that moves inactive data to object storage; it is not a primary data-at-rest encryption feature for volumes.

D. SnapMirror Sync is a synchronous data replication feature for disaster recovery, focused on data availability, not encryption of the source volume.

1. NetApp ONTAP Documentation Center. (2023). Overview of NetApp Volume Encryption. In ONTAP 9 Security and data encryption. Retrieved from NetApp documentation. This document states, "NetApp Volume Encryption (NVE) is a software-based, full-volume encryption solution... NVE encrypts all data in a volume."

2. NetApp. (2022). TR-4567: NetApp ONTAP Encryption Power Guide. This technical report details NVE as the software-based, volume-granular encryption solution. Section 2, "NetApp Encryption Solutions," describes NVE's function.