2V0-21.23 Question 447
Select 3You are tasked with migrating an encrypted virtual machine (VM) from one vSphere cluster to another. Both clusters are managed by the same vCenter Server, and both clusters are configured with compatible hardware. What steps must you ensure are in place before performing the migration?
- A
Ensure the destination ESXi host has the same encryption keys available as the source host.
- B
Confirm that the destination cluster is configured with a Key Management Server (KMS).
- C
Verify that the VM's encryption policy is compatible with the destination cluster.
- D
Disable encryption on the VM before starting the migration.
- E
Ensure that both clusters are in Enhanced Linked Mode (ELM).
Show answer and explanation
Correct answers: A, B, C
Explanation
Migrating an encrypted VM requires ensuring that the destination environment has the necessary encryption infrastructure. This includes ensuring that the encryption keys are accessible on the target ESXi host, verifying the presence of a KMS on the destination cluster, and confirming compatibility of the VM's encryption policy. Disabling encryption is not required, as encrypted VMs can be migrated securely while maintaining their encryption status, and Enhanced Linked Mode is unrelated to this process.
- A. Correct.
Correct. The destination ESXi host must have access to the same encryption keys as the source host for an encrypted VM to function after migration.
- B. Correct.
Correct. A KMS must be configured on the destination cluster to manage the encryption keys securely.
- C. Correct.
Correct. The encryption policy associated with the VM needs to be compatible with the destination cluster to perform a successful migration.
- D. Incorrect.
Incorrect. Disabling encryption on the VM is not required and would compromise the security of the virtual machine. Migration of encrypted VMs can be done while maintaining encryption.
- E. Incorrect.
Incorrect. Enhanced Linked Mode (ELM) is not a requirement for migrating encrypted VMs; it is used for managing multiple vCenter Servers but is unrelated to encryption or key management.