After a recent security assessment, the security team recommended that vSAN encryption be enabled. The vSAN administrator will be adding a Key Management Server to vCenter. What is a prerequisite to…

The correct answer is D. Cryptographer ManageKeyServer permissions. Required privileges: Host.Inventory.EditCluster Cryptographer.ManageEncryptionPolicy Cryptographer.ManageKMS Cryptographer.ManageKeys https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.vsan.doc/GUID- E7CA36B7-D7EB-423A-ADD1-7E410E36F5A7.html

Deploy and Configure VMware HCI

Question

After a recent security assessment, the security team recommended that vSAN encryption be enabled. The vSAN administrator will be adding a Key Management Server to vCenter. What is a prerequisite to taking this action?

Options

AIPv6 addressing
BProxy server with username and password access
CSelf-encryption drives
DCryptographer ManageKeyServer permissions

How the community answered

(43 responses)

A
5% (2)
B
7% (3)
C
14% (6)
D
74% (32)

Explanation

Required privileges: Host.Inventory.EditCluster Cryptographer.ManageEncryptionPolicy Cryptographer.ManageKMS Cryptographer.ManageKeys https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.vsan.doc/GUID- E7CA36B7-D7EB-423A-ADD1-7E410E36F5A7.html

Topics

#vSAN encryption#KMS#ManageKeyServer permissions#data-at-rest encryption

Community Discussion

No community discussion yet for this question.

Full 5V0-22.21 Practice