Exam VMCE v12 topic 1 question 32 discussion

https://helpcenter.veeam.com/docs/backup/vsphere/encrypted_vms_backup.html?ver=120 he backup proxy must be working in the virtual appliance or network transport mode". To back up VMware encrypted VMs, the backup infrastructure must meet the following requirements: VM encryption instances must be preconfigured in the virtual infrastructure: you must set up the Key Management Server (KMS), create the VM encryption policy, and assign it to VMs in advance. The backup proxy must be working in the Virtual appliance or Network transport mode: The backup proxy working in the Virtual appliance transport mode must be deployed on an encrypted VM. The backup proxy working in the Network transport mode uses the NBD protocol by default. If you want to use NBDSSL, select the Enable host to proxy traffic encryption in Network mode (NBDSSL) check box in the Transport Mode window. Note that traffic encryption puts more stress on the CPU of an ESXi host and can decrease performance.

back up sensitive data, physical proxies in NBDSSL, data security over anything else

B https://helpcenter.veeam.com/docs/backup/vsphere/encrypted_vms_backup.html?ver=120

Per this article, it says "The backup proxy must be working in the virtual appliance or network transport mode". To back up VMware encrypted VMs, the backup infrastructure must meet the following requirements: VM encryption instances must be preconfigured in the virtual infrastructure: you must set up the Key Management Server (KMS), create the VM encryption policy, and assign it to VMs in advance. The backup proxy must be working in the Virtual appliance or Network transport mode: The backup proxy working in the Virtual appliance transport mode must be deployed on an encrypted VM. The backup proxy working in the Network transport mode uses the NBD protocol by default. If you want to use NBDSSL, select the Enable host to proxy traffic encryption in Network mode (NBDSSL) check box in the Transport Mode window. Note that traffic encryption puts more stress on the CPU of an ESXi host and can decrease performance.

so the correct is C

NBDSSL is for Network transport mode, in our scenario is used Direct storage access