3V0-21.23 · Question #159
An architect is discussing the design of a vSphere solution with a customer. The following requirements have been defined for the solution: - The solution must provide data encryption at rest - The…
The correct answer is C. Encryption is a CPU-intensive feature. The ESXi hosts should use the AES-NI BIOS setting to E. When data is encrypted by the ESXi host, the effectiveness of de-duplication on the storage may. AES-NI BIOS setting: Encryption, especially VM Encryption in vSphere, is CPU-intensive because it requires the processing power to encrypt and decrypt data. By enabling AES-NI (Advanced Encryption Standard New Instructions) in the BIOS, ESXi hosts can take advantage of…
Question
An architect is discussing the design of a vSphere solution with a customer. The following requirements have been defined for the solution:
- The solution must provide data encryption at rest
- The solution must provide the ability to reduce the amount of storage consumed from duplicate
data
- The solution must minimize the amount of resources consumed by the encryption process.
The architect has made a design decision that VM Encryption will be used to meet these requirements. Which two implications should the architect include in the design in relation to this design decision? (Choose two.)
Options
- AEncryption is a CPU-intensive feature. Resource Pools should be used to assign shares to the
- BWhen data is encrypted by the storage device, the effectiveness of de-duplication on the storage
- CEncryption is a CPU-intensive feature. The ESXi hosts should use the AES-NI BIOS setting to
- DEncryption is a memory-intensive feature. The ESXi hosts should use the AES-NI BIOS setting to
- EWhen data is encrypted by the ESXi host, the effectiveness of de-duplication on the storage may
How the community answered
(29 responses)- A7% (2)
- B24% (7)
- C52% (15)
- D17% (5)
Explanation
AES-NI BIOS setting: Encryption, especially VM Encryption in vSphere, is CPU-intensive because it requires the processing power to encrypt and decrypt data. By enabling AES-NI (Advanced Encryption Standard New Instructions) in the BIOS, ESXi hosts can take advantage of hardware-based acceleration for encryption tasks. This reduces the load on the CPU, thus improving the performance of encryption operations and lowering CPU utilization. De-duplication effectiveness: When data is encrypted at the ESXi host level (via VM Encryption), the deduplication process on the storage system becomes less effective. This is because encrypted data is presented as random data, meaning that even identical data blocks will appear different due to encryption. Therefore, deduplication technologies that rely on identifying duplicate data blocks will not be able to achieve the same level of efficiency when the data is encrypted at rest.
Topics
Community Discussion
No community discussion yet for this question.