2V0-21.23 Question 87
Select 4An organization has deployed a VMware vSphere environment to host critical applications. The security team has mandated that sensitive data within certain virtual machines (VMs) must be protected against unauthorized access, even from hypervisor administrators. Which of the following statements correctly describes the role of Virtual Machine Encryption in this scenario?
- A
Virtual Machine Encryption encrypts the entire VM, including its files and virtual disks, to ensure data confidentiality.
- B
Virtual Machine Encryption prevents hypervisor administrators from accessing encrypted VM data, even if they have access to the host datastore.
- C
Virtual Machine Encryption allows for selective encryption of specific VM files, such as configuration files, without encrypting the entire VM.
- D
Virtual Machine Encryption is managed through vSphere Storage Policies, enabling administrators to apply encryption policies to specific VMs or groups of VMs.
- E
Virtual Machine Encryption requires a key management server (KMS) to securely manage and distribute encryption keys.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
Virtual Machine Encryption in VMware vSphere is a powerful feature that ensures the confidentiality of VM data by encrypting the entire VM, including its configuration files and virtual disks. It is managed through vSphere Storage Policies and requires integration with a key management server (KMS) for secure key distribution. One of its key benefits is protecting sensitive data even from hypervisor administrators, ensuring compliance with strict security requirements.
- A. Correct.
Correct: Virtual Machine Encryption encrypts the VM’s configuration files, virtual disks, and other related data, ensuring complete protection of sensitive data.
- B. Correct.
Correct: Virtual Machine Encryption ensures that even administrators with access to the hypervisor or datastore cannot read the encrypted data without proper authorization.
- C. Incorrect.
Incorrect: Virtual Machine Encryption does not allow selective encryption of specific VM files. It is designed to encrypt the entire VM to maintain consistency and security.
- D. Correct.
Correct: Encryption is applied using vSphere Storage Policies, giving administrators the flexibility to assign encryption policies to specific VMs or groups.
- E. Correct.
Correct: A key management server (KMS) is essential for managing and distributing encryption keys securely as part of Virtual Machine Encryption.