Veeam Certified Engineer (VMCE) v12 — Question 20

The engineer needs to back up sensitive data located on VMware vSphere encrypted VMs. The company policy prioritizes data security over anything else.
In the backup infrastructure, the engineer has configured:
One physical proxy configured on the DirectSAN Access transport mode, for fast data transfer speed and less load on the production network

Two physical proxies in NBDSSL -
Encryption has been enabled on the backup job
Which action will allow the VM data to remain encrypted during the entire backup process?

Answer options

• A. Configure Global Network Traffic Rules to encrypt the backup traffic.
• B. Configure the job to use the proxies with the NBDSSL transport mode.
• C. Configure the job to use the proxy with the DirectSAN Access transport mode.
• D. Upload a custom script that re-encrypts the VM data after the backup job.

Correct answer: B

Explanation

Option B is correct because using proxies with the NBDSSL transport mode ensures that the data is encrypted during the backup process. Option A would secure traffic but does not guarantee encryption of the VM data itself. Option C would not maintain encryption as it bypasses the NBDSSL mode. Option D introduces unnecessary complexity and does not ensure encryption during the backup process.