VMware 5V0-21.21 Exam - Topic 1 Question 89 Discussion

Actual exam question for VMware's 5V0-21.21 exam

Question #: 89
Topic #: 1

[All 5V0-21.21 Questions]

An administrator has been tasked with enabling encryption for existing virtual machines on a vSAN cluster.

Which three prerequisites must be satisfied before completing the task? (Choose three.)

ACreate an encryption storage policy

BEnable Data-In-Transit encryption first

CEnable that the virtual machines are powered on

DVerify if a role with privilege ''Cryptographic operations.Encrypt new'' is assigned

EVerify if a role with privilege ''Cryptographic operations.Migrate'' is assigned

FEstablish a trusted connection with the KMS

Show Suggested Answer

Suggested Answer: A, D, F

Because Before you can create encrypted virtual machines, you must create an encryption storage policy. You create the storage policy once, and assign it each time you encrypt a virtual machine or virtual disk. https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-7DE1ED8F-880B-421E-B27B-5AAA58454AFA.html

by Micheal at Nov 22, 2025, 09:16 AM

Limited Time Offer

25%

Off

Get Premium 5V0-21.21 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Glory

8 days ago

All good points! But I think the KMS connection is the top priority.

upvoted 0 times

...

Willie

13 days ago

I agree with the roles, but the storage policy is a must. Can't skip that!

upvoted 0 times

...

Ligia

18 days ago

Don't forget about the roles! We need the right privileges assigned.

upvoted 0 times

...

Mariann

23 days ago

I feel like enabling Data-In-Transit encryption is also important. Safety first!

upvoted 0 times

...

Brandon

28 days ago

Definitely! And we should verify the KMS connection too.

upvoted 0 times

...

Nieves

1 month ago

I think we need to create an encryption storage policy first. It's crucial.

upvoted 0 times

...

Denny

1 month ago

Isn't Data-In-Transit encryption optional? Not sure about that.

upvoted 0 times

...

Vallie

2 months ago

Agreed, the role privileges are super important too.

upvoted 0 times

...

Teri

2 months ago

Wait, do the VMs really need to be powered on for this?

upvoted 0 times

...

Luz

2 months ago

Gotta create an encryption storage policy first!

upvoted 0 times

...

Kanisha

2 months ago

Haha, I bet the answer is just "All of the above" and the exam writer is laughing at us.

upvoted 0 times

...

Tyra

3 months ago

B, D, and E. Cryptographic operations are the real deal, folks.

upvoted 0 times

...

Richelle

3 months ago

A, D, and F. Encryption is the key to keeping those VMs safe and sound.

upvoted 0 times

...

Alethea

3 months ago

Hmm, I think B, D, and F are the way to go. Encryption is no joke, you know.

upvoted 0 times

...

Nickolas

3 months ago

D, E, and F are the correct prerequisites. Gotta love those cryptographic operations!

upvoted 0 times

...

Onita

3 months ago

I know we need the right privileges assigned, but I can't remember if both "Encrypt new" and "Migrate" are necessary or just one of them.

upvoted 0 times

...

Earlean

3 months ago

I practiced a similar question, and I feel like enabling Data-In-Transit encryption might be important, but I can't remember if it's required for existing VMs.

upvoted 0 times

...

Shawnee

4 months ago

I think we definitely need to establish a trusted connection with the KMS, but I can't recall if the VMs need to be powered on for this.

upvoted 0 times

...

Devora

4 months ago

Wait, do we need to power on the VMs before enabling encryption? I'm a bit confused on that part. Better read through the question again carefully.

upvoted 0 times

...

Arlene

4 months ago

I remember something about needing to create an encryption storage policy, but I'm not sure if that's the only prerequisite.

upvoted 0 times

...

Mammie

4 months ago

Alright, time to put on my problem-solving hat. I'm pretty confident I can figure this out, but I'll need to double-check those options to make sure I get all three right.

upvoted 0 times

...

Phung

5 months ago

Definitely need that KMS connection established.

upvoted 0 times

...

Jolene

5 months ago

Ah, I see what they're getting at. Gotta make sure we have the right privileges assigned for the crypto operations. That's going to be crucial.

upvoted 0 times

...

Carlota

5 months ago

Okay, let's see. I think the key is making sure we have the right encryption policies and permissions set up first. Gotta get that KMS connection established too.

upvoted 0 times

...