2V0-21.23 Question 445
Select 2You are tasked with converting a non-encrypted virtual machine (VM) into an encrypted VM in a vSphere environment. The VM is powered off, and the ESXi host it resides on is managed by vCenter Server. Which two of the following steps are required to successfully perform this operation?
- A
Enable encryption mode on the ESXi host where the VM resides.
- B
Create or use an existing Key Management Server (KMS) and establish a connection with vCenter Server.
- C
Power on the VM before applying encryption to verify its functionality.
- D
Edit the VM's settings in vCenter Server to enable VM Encryption.
- E
Ensure that the user performing the operation has the 'Cryptographic Operations' privilege.
Show answer and explanation
Correct answers: B, E
Explanation
To convert a non-encrypted VM to an encrypted VM, vCenter Server must be connected to a Key Management Server (KMS) to manage encryption keys, and the user performing the operation must have the 'Cryptographic Operations' privilege as this is required for encryption-related tasks. Other steps, such as enabling encryption mode on the ESXi host or powering on the VM, are not part of the required process.
- A. Incorrect.
Enabling encryption mode on the ESXi host is not required for encrypting VMs. Instead, encryption relies on vCenter Server and a configured KMS.
- B. Correct.
A Key Management Server (KMS) must be configured and connected to vCenter Server to manage encryption keys for encrypting the VM.
- C. Incorrect.
The VM must remain powered off during the encryption process. Powering it on is not a required step for encryption.
- D. Incorrect.
VM encryption is not enabled directly through the VM's settings. Instead, you encrypt the VM through vSphere workflows, which rely on encryption policies.
- E. Correct.
The 'Cryptographic Operations' privilege is required for the user performing the encryption to access encryption-related settings and operations.