2V0-21.23 Question 440
Select 3An administrator is tasked with deploying an encrypted virtual machine to ensure data security. The administrator has already configured a Key Management Server (KMS) and verified its connection with the vCenter Server. Which of the following steps must the administrator complete to successfully deploy the encrypted virtual machine?
- A
Create a VM Storage Policy with encryption enabled and assign it to the virtual machine.
- B
Ensure the virtual machine hardware version is 14 or later.
- C
Enable encryption on the ESXi host where the VM will be deployed.
- D
Select 'Encrypted VM' in the compatibility settings during virtual machine creation.
- E
Configure the virtual machine's operating system for encryption.
- F
Verify that the user deploying the virtual machine has the 'Cryptographic Operations' privilege.
Show answer and explanation
Correct answers: A, B, F
Explanation
To deploy an encrypted virtual machine, the administrator must ensure that a VM Storage Policy with encryption enabled is created and assigned to the VM. The VM hardware version must be 14 or later as encryption is only supported on newer hardware versions. Additionally, the user performing this task must have the 'Cryptographic Operations' privilege to perform encryption-related actions. Enabling encryption is not done at the host level or through VM compatibility settings, and operating system-level encryption is outside the scope of VMware's encrypted VM functionality.
- A. Correct.
Correct. A VM Storage Policy with encryption enabled must be created and assigned to the virtual machine to specify the use of encryption.
- B. Correct.
Correct. The virtual machine hardware version must be 14 or later to support encryption features.
- C. Incorrect.
Incorrect. Encryption is not enabled at the ESXi host level; encryption is configured at the VM level using VM policies.
- D. Incorrect.
Incorrect. There is no specific 'Encrypted VM' option in the compatibility settings during VM creation. Encryption is handled through policies and privileges.
- E. Incorrect.
Incorrect. Encryption is not configured at the operating system level; it is managed at the virtual machine and storage levels by VMware.
- F. Correct.
Correct. The 'Cryptographic Operations' privilege is required for users to perform encryption-related tasks, including deploying an encrypted virtual machine.