2V0-21.23 exam dumps

2V0-21.23 practice question 90 of 452

VMware Certified Professional - Data Center Virtualization 2024. Associate level, VMware. Free question with the correct answer and a full explanation.

2V0-21.23 Question 90

Select 3

An organization wants to ensure their virtualized environment is secured by validating that only trusted ESXi hosts are part of their cluster. They also want to enforce that workloads are only run on these trusted hosts. How can VMware vSphere Trust Authority help achieve this goal?

  1. A

    By establishing a trusted relationship between a vSphere Trust Authority host and a vCenter Server.

  2. B

    By using a key provider to encrypt workloads and ensure only trusted hosts have access to the keys.

  3. C

    By enabling vSphere Trust Authority to provide attestation for ESXi hosts in the cluster.

  4. D

    By ensuring that only vSphere Distributed Switches are used in trusted environments.

  5. E

    By using TPM 2.0 hardware on ESXi hosts to verify their trustworthiness.

Show answer and explanation

Correct answers: B, C, E

Explanation

vSphere Trust Authority enhances security by establishing a trusted environment for workloads. It achieves this by providing attestation for ESXi hosts, using key providers to encrypt workloads, and relying on TPM 2.0 hardware to verify the integrity of hosts. This ensures that workloads run only on trusted hosts, mitigating the risk of compromised infrastructure.

  • A. Incorrect.

    This option is incorrect because vSphere Trust Authority establishes a trusted relationship between a Trust Authority Cluster and the workload cluster, not directly with the vCenter Server.

  • B. Correct.

    This option is correct because vSphere Trust Authority uses key providers to encrypt and protect workloads, ensuring only trusted hosts can access encryption keys.

  • C. Correct.

    This option is correct because vSphere Trust Authority enables attestation, which validates the integrity of ESXi hosts in the cluster.

  • D. Incorrect.

    This option is incorrect because vSphere Trust Authority is not related to vSphere Distributed Switches; it focuses on securing ESXi hosts and encrypting workloads.

  • E. Correct.

    This option is correct because vSphere Trust Authority relies on TPM 2.0 hardware to verify the trustworthiness of ESXi hosts.

Timed practice exam

Take a 2V0-21.23 practice test under exam conditions

70 questions in 135 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

More 2V0-21.23 practice questions

  1. 91.An organization is planning to encrypt its virtual machines using vSphere VM Encryption. To achieve...
  2. 92.An organization wants to encrypt its virtual machine disks in a vSphere environment for enhanced...
  3. 93.An organization is using VMware vSphere to host its virtual machines and has implemented VM...
  4. 94.An organization is running a critical virtual machine (VM) that stores sensitive customer data. The...
  5. 95.A system administrator is managing a virtualized environment and needs to ensure that virtual...
Back to the 2V0-21.23 exam dumps