2V0-21.23 Question 86
Select 3A company has strict compliance requirements to protect sensitive data stored in virtual machines within their data center. The IT administrator is considering implementing VMware Virtual Machine Encryption (VM Encryption). Which of the following are true about the role and functionality of Virtual Machine Encryption in the data center?
- A
VMware Virtual Machine Encryption encrypts the entire datastore where the virtual machine resides.
- B
Virtual Machine Encryption protects the virtual machine's files and disks, ensuring data remains secure at rest.
- C
Encryption keys for Virtual Machine Encryption are managed through an external Key Management Server (KMS) integrated with vSphere.
- D
Virtual Machine Encryption requires that the ESXi host is configured in lockdown mode for enhanced security.
- E
Virtual Machine Encryption can be selectively applied to individual VMs or specific virtual disks.
Show answer and explanation
Correct answers: B, C, E
Explanation
VMware Virtual Machine Encryption is a key feature in securing sensitive data in a virtualized data center. It encrypts virtual machine files and disks rather than the entire datastore, ensuring data is protected at rest. It integrates with an external Key Management Server (KMS) for secure encryption key management and offers flexibility by allowing encryption to be applied to individual VMs or disks. While additional security measures like lockdown mode are recommended, they are not mandatory for using Virtual Machine Encryption.
- A. Incorrect.
This is incorrect. Virtual Machine Encryption encrypts virtual machine files and disks, not the entire datastore.
- B. Correct.
This is correct. Virtual Machine Encryption ensures that virtual machine files and disks are encrypted to secure sensitive data at rest.
- C. Correct.
This is correct. VMware Virtual Machine Encryption requires integration with an external Key Management Server (KMS) to manage encryption keys.
- D. Incorrect.
This is incorrect. While lockdown mode increases security, it is not a mandatory requirement for using Virtual Machine Encryption.
- E. Correct.
This is correct. Virtual Machine Encryption provides flexibility in applying encryption at the level of specific virtual machines or virtual disks, allowing for granular protection.