Nutanix Certified Professional (NCP) — Question 27

Which change can be made on a cluster with software-based Data-at-Rest Encryption enabled?

Answer options

• A. Disable encryption on the cluster
• B. Deploy an additional Native KMS Server
• C. Enable encryption for a VM
• D. Change Native KMS to External KMS

Correct answer: D

Explanation

The correct answer is D because changing from Native KMS to External KMS is a supported alteration in such clusters. Options A and B are incorrect as disabling encryption or deploying an additional Native KMS Server are not standard practices in this scenario. Option C is also incorrect since enabling encryption for a VM does not pertain to changes made on the cluster itself.