3V0-23.25 Exam Dumps | A Cloud Administrator attempts to enforce a compliance policy that requires 100% network encryption for

<< Prev Question Next Question >>

Question 24/60

A Cloud Administrator attempts to enforce a compliance policy that requires 100% network encryption for Tier-1 virtual machines.
The administrator opens the SPBM configuration wizard to apply a Data-in-Transit (DiT) rule specifically to the Tier-1 VM tag.
```
[Storage Policy Rule View]
Policy: Tier-1-Encrypted-Net
Available Rules:
- Failures To Tolerate
- Stripe Width
- IOPS Limit
- Data-at-Rest Encryption
- Data-in-Transit Encryption: [ MISSING ]
```
Why is the "Data-in-Transit Encryption" option absent from the VCF Storage Policy Based Management (SPBM) VM-level definition list?

A. DiT encryption is strictly a cluster-wide ESXi VMkernel network setting that encrypts all replication and CMMDS traffic leaving the host; it physically cannot be applied granularly at the per-VM object level.

B. DiT requires the host to be in vSAN ESA mode; the absence indicates the cluster is running legacy vSAN OSA.

C. The option is hidden because VCF automatically encrypts all NSX-T overlay traffic by default, making the vSAN setting redundant.

D. The administrator must first enable the "vSphere Native Key Provider" to unlock the SPBM network features.

Question 24/60

LEAVE A REPLY

Download PDF File