2V0-21.23 Question 92
Single answerAn organization wants to encrypt its virtual machine disks in a vSphere environment for enhanced security. The administrator is tasked with setting up encryption and ensuring compliance with security policies. What role does the Key Management Services (KMS) server play in this setup, and how does it integrate with vSphere?
- A
It generates and stores encryption keys used to encrypt and decrypt virtual machine disks within vSphere.
- B
It provides a secure storage location for vSphere-generated encryption keys but does not generate keys itself.
- C
It integrates directly with the ESXi hosts to perform encryption and decryption operations on virtual machine disks.
- D
It acts as an intermediary between vSphere and the virtual machine, ensuring compliance with encryption policies but does not store encryption keys.
Show answer and explanation
Correct answer: B
Explanation
The Key Management Services (KMS) server plays a critical role in vSphere encryption by securely storing encryption keys generated by vSphere. This ensures the keys are available for encryption and decryption of virtual machine disks while maintaining strong security and compliance requirements. It does not generate keys or directly perform encryption operations but integrates with vSphere to manage key lifecycle operations.
- A. Incorrect.
Incorrect. The KMS server does not generate encryption keys. Instead, it provides a secure repository for keys generated by vSphere.
- B. Correct.
Correct. The KMS server securely stores encryption keys generated by vSphere and ensures they are available for encryption and decryption operations as needed.
- C. Incorrect.
Incorrect. The KMS server does not directly interact with ESXi hosts for encryption/decryption tasks. These tasks are handled by vSphere using keys retrieved from the KMS server.
- D. Incorrect.
Incorrect. The KMS server does not act as an intermediary but is primarily responsible for securely storing and managing encryption keys.