2V0-21.23 Question 449
Single answerYou are tasked with configuring vMotion encryption properties in a VMware vSphere environment. The security policy mandates that virtual machines being migrated using vMotion must have their data encrypted during the migration process. Which vMotion encryption property should you configure to meet this requirement?
- A
Disabled: Ensures vMotion encryption is turned off, allowing unencrypted data transfer.
- B
Opportunistic: Encrypts vMotion traffic only if the host supports encryption.
- C
Required: Enforces encryption for all vMotion traffic, and the operation will fail if encryption is not supported.
- D
Optional: Allows the administrator to manually enable encryption for specific vMotion operations.
Show answer and explanation
Correct answer: C
Explanation
The 'Required' encryption property ensures that vMotion traffic is always encrypted during migration, meeting the strict security policy requirement. If encryption is not supported on the host, the vMotion operation will fail, ensuring compliance with the security standard. Other options either do not enforce encryption or are not valid in the context of vMotion encryption properties.
- A. Incorrect.
Disabled: This setting turns off vMotion encryption entirely, which does not meet the security requirement for encrypted data transfer.
- B. Incorrect.
Opportunistic: While this option enables encryption, it only applies if the host supports it. It does not enforce encryption in all cases, which does not meet the strict security policy requirement.
- C. Correct.
Required: This option enforces encryption for all vMotion traffic, ensuring that the data is always encrypted during migration. If encryption is not supported, the vMotion operation will fail, which aligns with the security policy.
- D. Incorrect.
Optional: There is no such 'Optional' vMotion encryption property in VMware vSphere. This option is invalid.