VMware App Volumes Specialist (2021) — Question 95

An administrator wants to enable encryption on an existing vSAN cluster that already contains virtual machines.
Which additional step should the administrator take to ensure no data is lost during the encryption process?

Answer options

• A. Select 'Erase disks before use' check box when enabling encryption on a vSAN cluster.
• B. Make vCenter Server trust the KMS, either by trusting the KMS or by uploading a KMS certificate.
• C. Ensure that the vSAN Encryption is enabled by default on the existing cluster to encrypt old and new data.
• D. Disable vSphere Distributed Resources Schedule (DRS) on the vSAN cluster.

Correct answer: B

Explanation

The correct answer is B because ensuring that vCenter Server trusts the KMS is crucial for successful encryption management. Options A and C do not address the necessary trust relationship with the KMS, and option D is unrelated to the encryption process and does not help prevent data loss.