VCP-VCF Administrator 2024 Question 215
Select 2You are tasked with configuring vMotion on a VMware Cloud Foundation environment to ensure the security of virtual machine migrations. Which of the following steps should you perform to enable vMotion encryption?
- A
Enable encryption in the vSphere Distributed Switch (vDS) settings.
- B
Ensure that the ESXi hosts are configured with a Key Management Server (KMS).
- C
Set the 'Encryption' option for vMotion traffic in the VMkernel adapter settings.
- D
Enable 'Encrypted vMotion' in the encryption policy of the virtual machine.
- E
Configure a distributed firewall rule to allow only encrypted vMotion traffic.
Show answer and explanation
Correct answers: B, D
Explanation
To secure vMotion with encryption, the ESXi hosts must be configured with a Key Management Server (KMS) to enable encryption capabilities. Additionally, the encryption policy must be set at the virtual machine level to enforce encrypted vMotion for that specific VM. These steps ensure that vMotion traffic is securely encrypted during migration.
- A. Incorrect.
Encryption settings for vMotion are not configured at the vSphere Distributed Switch (vDS) level. This option is incorrect.
- B. Correct.
To enable encrypted vMotion, the ESXi hosts must be configured with a Key Management Server (KMS) to provide the necessary encryption keys.
- C. Incorrect.
The encryption settings for vMotion traffic are not configured within the VMkernel adapter settings. This option is incorrect.
- D. Correct.
The 'Encrypted vMotion' policy needs to be enabled at the virtual machine level, as it dictates whether vMotion traffic for that VM must be encrypted.
- E. Incorrect.
While a distributed firewall can enhance security, it does not directly enable encryption for vMotion traffic. This option is incorrect.