2V0-21.23 Question 441
Select 3A company requires a new virtual machine to be deployed with encryption to ensure data security. As a VMware administrator, you are tasked with deploying this encrypted virtual machine. Which of the following steps must you take to successfully deploy an encrypted virtual machine in vSphere?
- A
Ensure the vCenter Server has a Key Management Server (KMS) configured and trusted.
- B
Enable vSphere HA on the cluster where the virtual machine will be deployed.
- C
Use a VM Storage Policy that includes encryption during the virtual machine creation.
- D
Verify that the ESXi hosts in the cluster are configured with VM Encryption privileges.
- E
Select 'Encrypt Virtual Machine' in the VM Hardware settings tab after the VM is powered on.
Show answer and explanation
Correct answers: A, C, D
Explanation
Deploying an encrypted virtual machine in vSphere requires several prerequisites and configurations. First, a Key Management Server (KMS) must be configured and trusted to handle encryption keys. Additionally, you need to use a VM Storage Policy with encryption enabled during the creation process, and ESXi hosts must have the required VM Encryption privileges assigned. These steps ensure the proper encryption of the virtual machine's data. Enabling vSphere HA or modifying encryption settings after powering on the VM are not part of this process.
- A. Correct.
Correct. A Key Management Server (KMS) must be configured and trusted in vCenter Server to manage encryption keys, which are required for encrypted virtual machines.
- B. Incorrect.
Incorrect. While vSphere HA is a useful feature for high availability, it is not required for deploying an encrypted virtual machine.
- C. Correct.
Correct. You must use a VM Storage Policy with encryption enabled to deploy an encrypted virtual machine. Without this, encryption settings cannot be applied.
- D. Correct.
Correct. The ESXi hosts must have the appropriate VM Encryption privileges configured to manage and run encrypted virtual machines.
- E. Incorrect.
Incorrect. Encryption must be configured during the creation of the virtual machine or by applying an appropriate storage policy, not after the VM is powered on.