VMware App Volumes Specialist (2021) — Question 93

An administrator has been tasked with enabling encryption for existing virtual machines on a vSAN cluster.
Which three prerequisites must be satisfied before completing the task? (Choose three.)

Answer options

• A. Create an encryption storage policy
• B. Enable Data-In-Transit encryption first
• C. Enable that the virtual machines are powered on
• D. Verify if a role with privilege ג€Cryptographic operations.Encrypt newג€ is assigned
• E. Verify if a role with privilege ג€Cryptographic operations.Migrateג€ is assigned
• F. Establish a trusted connection with the KMS

Correct answer: C, D, F

Explanation

The correct answers are C, D, and F. Virtual machines must be powered on to enable encryption (C), a role with the 'Cryptographic operations.Encrypt new' privilege is necessary to perform encryption tasks (D), and a trusted connection with the KMS is required for encryption keys (F). Options A, B, and E are not prerequisites for enabling encryption on existing VMs.