Detailed Explanation:

Rationale for Correct Answer:

HPE StoreOnce Dual Authorization prevents a single administrator from deleting, expiring, or modifying backup data. Instead, any destructive action requires approval from a second administrator, mitigating insider threats and accidental deletions. This is the correct feature for immutability protection in a replicated StoreOnce environment.

Distractors:

B (CHAP): Used for iSCSI authentication, not backup immutability.

C: Encryption protects data confidentiality, not accidental deletion.

D: Resource restrictions are policy-driven but don’t enforce dual control over destructive actions.

Key Concept: Dual Authorization for ransomware and insider-threat protection on StoreOnce.