2V0-21.23 Question 98
Single answerAn organization is planning to deploy a set of virtual machines that will handle sensitive financial data. They want to ensure that the virtual machines meet security compliance requirements, such as secure boot and encryption of sensitive information. Which use case would justify the implementation of a virtual Trusted Platform Module (vTPM) in this scenario?
- A
To enable encryption of virtual machine disks using vSphere Encryption.
- B
To provide support for secure boot and protect the integrity of the operating system.
- C
To ensure high availability of virtual machines during host failures.
- D
To optimize compute and memory resource utilization for virtual machines.
Show answer and explanation
Correct answer: B
Explanation
The virtual Trusted Platform Module (vTPM) is primarily used to enhance the security of virtual machines by supporting secure boot and protecting the integrity of the operating system. This makes it a critical feature for use cases involving sensitive workloads, such as handling financial data, that require compliance with strict security standards.
- A. Incorrect.
While vSphere Encryption can be used to encrypt virtual machine disks, it does not specifically require a vTPM. vTPM is not directly tied to encryption itself but is related to secure boot and OS integrity.
- B. Correct.
vTPM is designed to support secure boot and protect the integrity of the operating system by storing security-related information, such as cryptographic keys, securely within the VM.
- C. Incorrect.
Ensuring high availability during host failures is a function of VMware HA (High Availability), not vTPM. vTPM is focused on security and not availability.
- D. Incorrect.
Optimizing compute and memory resource utilization is achieved through VMware features like DRS (Distributed Resource Scheduler), not vTPM.