A Tableau CRM Consultant is implementing encryption for a customer. Which two statements about Tableau CRM Encryption are true? (Choose two.)

A. By default, the same keys are used to encrypt data in Tableau CRM as are used to encrypt data in Salesforce objects.
B. The customer's org must have a tenant secret persisted in the Shield Platform key management store.
C. When Tableau CRM Encryption is enabled, all newly registered datasets are encrypted at rest.
D. Bring Your Own Key is supported only if replication is enabled.

Suggest answer: BC

Reference: