Exam 2V0-21.23 topic 1 question 59 discussion

In this case the correct should be A and D. Encryption at Rest: VM Encryption encrypts the virtual machine files (VMDK, VMX, etc.) on the storage device, ensuring data protection even when the VM is powered off. Encryption in Transit: VM Encryption, when combined with Encrypted vSphere vMotion, automatically encrypts the VM data during vMotion operations, providing protection during migration between hosts.

This was my answer, passed with 452

To meet the requirements of encrypting workloads at rest, automatically encrypting workloads during transit, and not requiring specific hardware, the administrator should configure: D. VM Encryption VM Encryption provides encryption for virtual machines and meets all the specified requirements. It encrypts the VM's data at rest and also ensures that the data is encrypted during transit. Additionally, VM Encryption does not require specific hardware, making it a suitable choice for this scenario. Options A, B, and C do not directly address all of the specified requirements. Encrypted vSphere vMotion (A) is specifically related to encrypting the vMotion traffic, not the VMs themselves. UEFI Secure Boot (B) is a security feature for booting and does not provide VM-level encryption. Host Encryption (C) typically refers to encrypting the data on the host's storage devices, which is different from VM-level encryption.

Answer is VM Encryption. With vSphere Virtual Machine Encryption, you can encrypt your sensitive workloads in an even more secure way. Access to encryption keys can be made conditional to the ESXi host being in a trusted state. vSphere vMotion always uses encryption when migrating encrypted virtual machines. https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-E6C5CE29-CD1D-4555-859C-A0492E7CB45D.html#:~:text=encrypt%20your%20sensitive%20workloads

Why not C? Take a look at the following article: https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-E6C5CE29-CD1D-4555-859C-A0492E7CB45D.html "Prerequisites and Required Privileges for Virtual Machine Encryption Tasks Virtual machine encryption tasks are possible only in environments that include vCenter Server. Also, the ESXi host must have encryption mode activated for most encryption tasks" I think Host Encryption is a requirement for perform VM Encryption. In addition, the letter specifies that encryption must occur in transit

VM encryption is correct option

VM Encryption, cause this is the only option that not require specific hardware

VM Encryption, cause this is the only option that not require specific hardware

D: this should be VM encryption