2V0-21.23 Question 91
Single answerAn organization is planning to encrypt its virtual machines using vSphere VM Encryption. To achieve this, they need to configure a Key Management Services (KMS) server. What is the role of the KMS server in this setup?
- A
The KMS server generates and manages the encryption keys used to encrypt virtual machine files.
- B
The KMS server stores the encrypted virtual machine files in a secure repository.
- C
The KMS server is responsible for managing vCenter Server user authentication and authorization.
- D
The KMS server provides backup and recovery services for virtual machines in the cluster.
Show answer and explanation
Correct answer: A
Explanation
The KMS server plays a critical role in vSphere VM Encryption by generating and managing the encryption keys necessary to encrypt and decrypt virtual machine files. This ensures that sensitive data is protected. The KMS server integrates with vCenter Server to securely provide encryption keys when needed, but it does not handle file storage, authentication, or backup services.
- A. Correct.
Correct. The KMS server is responsible for generating and managing the encryption keys that are used by vSphere to encrypt virtual machine files.
- B. Incorrect.
Incorrect. The KMS server does not store encrypted virtual machine files; they remain on the datastore managed by vSphere.
- C. Incorrect.
Incorrect. vCenter Server handles user authentication and authorization, not the KMS server.
- D. Incorrect.
Incorrect. The KMS server does not provide backup or recovery services; its primary role is key management.