2V0-21.23 Question 443
Select 2You are tasked with converting a non-encrypted virtual machine to an encrypted virtual machine in your vSphere environment. The virtual machine is powered off, and you have already configured a Key Management Server (KMS) in vCenter. What are the necessary steps to complete the encryption process?
- A
Enable encryption for the virtual machine by editing its settings and selecting an encryption policy.
- B
Power on the virtual machine to apply the encryption settings.
- C
Use the 'Encrypt Virtual Machine' option in vSphere Client and select a storage policy that supports encryption.
- D
Ensure the virtual machine's data is migrated to an encrypted datastore before applying encryption.
- E
Disable encryption for the virtual machine's virtual disks to allow the encryption process to proceed.
Show answer and explanation
Correct answers: A, C
Explanation
To convert a non-encrypted virtual machine to an encrypted virtual machine, you must ensure the virtual machine is powered off and then enable encryption through the virtual machine's settings or the 'Encrypt Virtual Machine' option in vSphere Client. Additionally, you must select a storage policy that supports encryption. The configuration of a Key Management Server (KMS) in vCenter is a prerequisite for this process. Migrating data to an encrypted datastore or disabling encryption on virtual disks are not required steps.
- A. Correct.
Correct. Enabling encryption for the virtual machine by editing its settings or through the 'Encrypt Virtual Machine' option is required to apply the encryption policy.
- B. Incorrect.
Incorrect. The virtual machine must be powered off before encryption can be applied, as encryption cannot be done on a running virtual machine.
- C. Correct.
Correct. Using the 'Encrypt Virtual Machine' option and selecting an appropriate encryption storage policy in vSphere Client is a valid and necessary step.
- D. Incorrect.
Incorrect. Migrating the virtual machine's data to an encrypted datastore is not required as part of the encryption process. Encryption can be applied to the virtual machine directly.
- E. Incorrect.
Incorrect. Virtual disks do not need to have encryption disabled; rather, the process involves enabling encryption for the virtual machine and its disks based on the selected storage policy.