2V0-21.23 Question 444
Single answerYou are tasked with converting a non-encrypted virtual machine (VM) to an encrypted virtual machine in a VMware vSphere environment. The virtual machine is powered off, and you have already configured a Key Management Server (KMS) in the vCenter Server. What is the next step to successfully encrypt the virtual machine?
- A
Go to the virtual machine's settings and enable encryption in the VM options tab.
- B
Create a new encrypted virtual disk and replace the existing disks of the VM.
- C
Use the vSphere Client to migrate the virtual machine to an encrypted datastore.
- D
Right-click the virtual machine, select 'Encrypt', and choose the encryption key provided by the KMS.
Show answer and explanation
Correct answer: D
Explanation
To convert a non-encrypted virtual machine to an encrypted virtual machine, you must first configure a Key Management Server (KMS) in vCenter Server. Once the KMS is set up, you can right-click the VM in the vSphere Client, select 'Encrypt', and choose the encryption key provided by the KMS. This process ensures that the VM and its associated files are encrypted using the specified key.
- A. Incorrect.
This option is incorrect because encryption is not enabled directly in the VM options tab. Encryption is configured via a specific option in the vSphere Client.
- B. Incorrect.
This option is incorrect because creating a new encrypted virtual disk does not automatically encrypt the entire VM. The VM must be encrypted as a whole using the vSphere Client.
- C. Incorrect.
This option is incorrect because migrating to an encrypted datastore does not encrypt the virtual machine itself. The VM and its files must be explicitly encrypted.
- D. Correct.
This is the correct option because selecting 'Encrypt' from the VM's context menu in the vSphere Client initiates the process of encrypting the VM. You also specify the encryption key obtained from the configured KMS.