2V0-21.23 Question 85
Single answerA company is deploying a new set of virtual machines (VMs) in their data center. They are concerned about potential unauthorized access to sensitive data stored on these VMs. The security team has requested that any solution implemented should ensure that the data remains protected, even if the underlying storage is compromised. Which feature of Virtual Machine Encryption addresses this requirement?
- A
It encrypts the virtual machine's disk files and swap files using encryption keys managed by a vSphere-compatible Key Management Server (KMS).
- B
It ensures that virtual machine data is encrypted during live migrations between hosts.
- C
It prevents unauthorized users from accessing the vSphere Client to manage encrypted virtual machines.
- D
It enables role-based access control (RBAC) to restrict which administrators can view or modify encryption keys.
Show answer and explanation
Correct answer: A
Explanation
Virtual Machine Encryption in vSphere ensures that both the VM disk files and swap files are encrypted using encryption keys managed by a Key Management Server (KMS). This provides robust protection for sensitive VM data, even if the underlying storage is accessed without proper authorization. This makes it an essential feature for securing VMs in a data center environment.
- A. Correct.
Correct: Virtual Machine Encryption encrypts the virtual machine's disk files and swap files using keys managed by a KMS. This ensures that even if the underlying storage is compromised, the data remains secure.
- B. Incorrect.
Incorrect: While encryption during live migrations is a feature of vSphere, it is not the primary role of Virtual Machine Encryption in this scenario. This feature is part of vSphere vMotion encryption.
- C. Incorrect.
Incorrect: Virtual Machine Encryption does not directly manage access to the vSphere Client. Instead, it focuses on encrypting VM files and ensuring data protection.
- D. Incorrect.
Incorrect: While role-based access control (RBAC) can enhance security, it is not the specific feature addressing the protection of VM data in case of storage compromise.