VMware App Volumes (VCP-AM 2019) — Question 24

Which type of encryption is used for the data encryption key on the vSAN datastore?

Answer options

• A. TLS 1.1
• B. TLS 1.2
• C. AES-XTS 256
• D. AES-XTS 128

Correct answer: C

Explanation

AES-XTS 256 is the correct answer because it is specifically designed for encrypting data at rest, including the data encryption key in vSAN. The other options, TLS 1.1 and TLS 1.2, are protocols used for secure communications, while AES-XTS 128, although a valid encryption method, does not provide the same level of security as AES-XTS 256.