2V0-21.23 Question 99
Single answerAn organization plans to deploy a new set of virtual machines (VMs) to handle sensitive financial data. The compliance team has mandated the use of hardware-backed security features for data encryption and secure boot. Additionally, they require that any sensitive information within the VMs, such as encryption keys, is protected from unauthorized access at the hypervisor level. Which feature should be configured to meet these requirements?
- A
Enable virtual Trusted Platform Module (vTPM) for the VMs
- B
Enable Fault Tolerance (FT) on the VMs
- C
Configure vSphere High Availability (HA) for the cluster
- D
Utilize vSphere Distributed Resource Scheduler (DRS) to balance the workloads
Show answer and explanation
Correct answer: A
Explanation
The virtual Trusted Platform Module (vTPM) is designed to provide enhanced security by supporting features like secure boot, protecting sensitive information such as encryption keys, and ensuring compliance with security standards. In this scenario, vTPM directly addresses the organization's need for hardware-backed security features while protecting sensitive data within the VMs, making it the correct choice.
- A. Correct.
vTPM provides hardware-backed security features that meet the requirements for secure boot and encryption key protection, making it the correct option for this scenario.
- B. Incorrect.
Fault Tolerance (FT) ensures VM availability in case of hardware failure but does not address security or compliance requirements for sensitive data.
- C. Incorrect.
vSphere High Availability (HA) focuses on restarting VMs in case of host failure but does not offer any hardware-backed security features like vTPM.
- D. Incorrect.
vSphere Distributed Resource Scheduler (DRS) is used to optimize resource utilization but does not address security or compliance requirements for sensitive data.