VCP-VCF Administrator 2024 Question 216
Select 2An organization has recently deployed VMware Cloud Foundation and wants to ensure that vMotion operations are securely encrypted to protect sensitive data during virtual machine migrations. Which steps should the administrator take to secure vMotion with encryption?
- A
Enable 'vMotion encryption' in the vSphere Client under the VM options for each virtual machine.
- B
Ensure that the ESXi hosts are configured with trusted certificates.
- C
Set the vMotion traffic network to use a dedicated VLAN for isolation.
- D
Configure the cluster to use Enhanced vMotion Compatibility (EVC).
- E
Enable encryption mode in the VMkernel adapter configuration for vMotion traffic.
Show answer and explanation
Correct answers: A, B
Explanation
To secure vMotion with encryption, the administrator must enable vMotion encryption at the VM level and ensure that ESXi hosts use trusted certificates for secure communication. These configurations protect the data during migration. Other options, such as VLAN isolation or EVC, do not directly address encryption but may complement security or functionality.
- A. Correct.
vMotion encryption must be enabled at the virtual machine level in the VM options. This ensures that vMotion traffic for that VM is encrypted during migration.
- B. Correct.
Trusted certificates ensure secure communication between ESXi hosts, which is a prerequisite for secure vMotion encryption.
- C. Incorrect.
While using a dedicated VLAN for vMotion traffic can enhance network isolation, it does not directly enable or enforce vMotion encryption.
- D. Incorrect.
EVC ensures CPU compatibility for vMotion but does not relate to securing vMotion with encryption.
- E. Incorrect.
The VMkernel adapter configuration does not include an option to enable encryption for vMotion traffic. Encryption is configured at the VM level or cluster level.