Salesforce Certified Tableau CRM and Einstein Discovery Consultant — Question 65

A Tableau CRM Consultant is implementing encryption for a customer.

Which two statements about Tableau CRM Encryption are true? (Choose two.)

Answer options

• A. By default, the same keys are used to encrypt data in Tableau CRM as are used to encrypt data in Salesforce objects.
• B. The customer's org must have a tenant secret persisted in the Shield Platform key management store.
• C. When Tableau CRM Encryption is enabled, all newly registered datasets are encrypted at rest.
• D. Bring Your Own Key is supported only if replication is enabled.

Correct answer: B, C

Explanation

Option B is correct because a tenant secret is necessary for proper encryption management in the Shield Platform. Option C is also correct as it states that new datasets are encrypted at rest once encryption is enabled. Options A and D are incorrect; the keys used for Tableau CRM and Salesforce objects are not the same by default, and Bring Your Own Key can be implemented regardless of replication settings.