VMware vSphere 7.x Advanced Design (VCAP-DCV Design 2021) — Question 28

A customer requires the use of data encryption to ensure data is not accessible when a drive is removed from the primary storage platform. However, there is also a requirement to use deduplication and compression against all workloads in order to conserve space.
Which solution meets the customer requirements?

Answer options

• A. Data-in-transit encryption
• B. OS-level encryption
• C. Encrypted backups
• D. Array-based encryption

Correct answer: D

Explanation

Array-based encryption is the correct choice as it encrypts data at the storage array level, allowing for deduplication and compression to still be applied effectively. In contrast, Data-in-transit encryption only secures data during transfer, OS-level encryption is limited to the operating system, and Encrypted backups do not address the need for securing active data on primary storage.