You have just deployed a new AFF A400 cluster running ONTAP 9.7 that currently has no data aggregates created. You want to ensure that all new data aggregates are encrypted before you migrate production data to the new AFF A400 cluster.

In this scenario, which two actions would you use to accomplish this task? (Choose two.)

A. After you create data aggregates, convert them to a NetApp Aggregate Encryption aggregate including root aggregates.

B. Ensure that you have the NetApp Volume Encryption license installed.

C. Ensure that the AFF A400 has self-encrypting drives.

D. After you create a data aggregate, verify that it is encrypted by default.