2V0-21.23 Question 446
Select 3You are tasked with migrating an encrypted virtual machine (VM) from one vCenter Server instance to another within your organization. Both vCenter Servers are managed by the same Cloud Administrator using the same encryption keys. Which of the following steps must you take to ensure a successful migration?
- A
Ensure that the encryption key provider is configured and available on both source and destination vCenter Servers.
- B
Verify that the destination ESXi host is included in the trusted key management server (KMS) cluster.
- C
Convert the encrypted VM to an unencrypted VM before initiating the migration.
- D
Ensure that the user account performing the migration has the 'Cryptographic Operations' privilege.
- E
Verify that the vSphere Client version is the same on both vCenter Servers.
Show answer and explanation
Correct answers: A, B, D
Explanation
Migrating an encrypted VM requires proper configuration of the encryption key provider, ensuring that the destination ESXi host is trusted by the KMS, and having the necessary privileges for cryptographic operations. These steps ensure that the encrypted VM's data remains secure and accessible during and after the migration process. However, converting the VM to an unencrypted state is not required, and matching vSphere Client versions is irrelevant to this task.
- A. Correct.
The encryption key provider must be configured and available on both the source and destination vCenter Servers to ensure that the encrypted VM can be decrypted and re-encrypted during the migration process.
- B. Correct.
The destination ESXi host must be part of the trusted key management server (KMS) cluster to allow access to the necessary encryption keys for the VM.
- C. Incorrect.
Converting the encrypted VM to an unencrypted VM is unnecessary and would compromise the VM's security. Encrypted VMs can be migrated without decrypting them, provided proper configurations are in place.
- D. Correct.
The 'Cryptographic Operations' privilege is required to perform actions such as migrating encrypted VMs. Without this privilege, the migration cannot proceed.
- E. Incorrect.
The vSphere Client version does not need to match across vCenter Servers for the migration of encrypted VMs. This is not a requirement for this operation.