nerdexam
Broadcom-VMware

5V0-21.21 · Question #29

An administrator has been tasked with enabling encryption for existing virtual machines on a vSAN cluster. Which three prerequisites must be satisfied before completing the task? (Choose three.)

The correct answer is A. Create an encryption storage policy D. Verify if a role with privilege "Cryptographic operations.Encrypt new" is assigned F. Establish a trusted connection with the KMS. Because Before you can create encrypted virtual machines, you must create an encryption storage policy. You create the storage policy once, and assign it each time you encrypt a virtual machine or virtual disk…

Deploy and Configure VMware HCI

Question

An administrator has been tasked with enabling encryption for existing virtual machines on a vSAN cluster. Which three prerequisites must be satisfied before completing the task? (Choose three.)

Options

  • ACreate an encryption storage policy
  • BEnable Data-In-Transit encryption first
  • CEnable that the virtual machines are powered on
  • DVerify if a role with privilege "Cryptographic operations.Encrypt new" is assigned
  • EVerify if a role with privilege "Cryptographic operations.Migrate" is assigned
  • FEstablish a trusted connection with the KMS

How the community answered

(36 responses)
  • A
    75% (27)
  • B
    3% (1)
  • C
    8% (3)
  • E
    14% (5)

Explanation

Because Before you can create encrypted virtual machines, you must create an encryption storage policy. You create the storage policy once, and assign it each time you encrypt a virtual machine or virtual disk. https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID- 7DE1ED8F-880B-421E-B27B-5AAA58454AFA.html

Topics

#vSAN encryption#KMS trust#cryptographic privileges#SPBM

Community Discussion

No community discussion yet for this question.

Full 5V0-21.21 Practice