2V0-21.23 Question 97
Single answerAn organization is planning to deploy a new virtual machine running a critical application that requires secure boot and encryption of sensitive application data. They want to ensure that the application meets compliance requirements for hardware-based security and trusted computing. Which of the following use cases is best addressed by enabling a virtual Trusted Platform Module (vTPM) for the virtual machine?
- A
Enabling secure boot and ensuring the integrity of the boot process for the virtual machine.
- B
Providing network-level encryption for data transmitted between virtual machines.
- C
Enabling physical hardware isolation for the virtual machine to prevent unauthorized access.
- D
Improving the performance of the virtual machine by offloading cryptographic operations to hardware.
Show answer and explanation
Correct answer: A
Explanation
vTPM is used to enhance the security of virtual machines by supporting secure boot processes, encryption key storage, and trusted computing. In this scenario, enabling vTPM ensures the integrity of the boot process and compliance with security requirements, making it the most appropriate solution.
- A. Correct.
vTPM provides functionality to enable secure boot by verifying the integrity of the boot process and supporting trusted computing.
- B. Incorrect.
vTPM does not provide network-level encryption; this is typically managed using protocols like TLS or IPsec.
- C. Incorrect.
vTPM does not enable physical hardware isolation; it is a virtualized feature designed for trusted computing and encryption.
- D. Incorrect.
vTPM is not designed to improve performance but rather to provide security features like encryption key storage and trusted boot processes.