VMware 5V0-21.21 Exam - Topic 3 Question 63 Discussion

Actual exam question for VMware's 5V0-21.21 exam

Question #: 63
Topic #: 3

[All 5V0-21.21 Questions]

An administrator wants to enable encryption on an existing vSAN cluster that already contains virtual machines.

Which additional step should the administrator take to ensure no data is lost during the encryption process?

ASelect 'Erase disks before use' check box when enabling encryption on a vSAN cluster.

BMake vCenter Server trust the KMS, either by trusting the KMS or by uploading a KMS certificate.

CEnsure that the vSAN Encryption is enabled by default on the existing cluster to encrypt old and new data.

DDisable vSphere Distributed Resources Schedule (DRS) on the vSAN cluster.

Show Suggested Answer

Suggested Answer: C, D

https://docs.vmware.com/en/VMware-vSphere/8.0/vsan-planning/GUID-031F9637-EE29-4684-8644-7A93B9FD8D7B.html

by Arthur at Jul 08, 2024, 09:35 AM

Limited Time Offer

25%

Off

Get Premium 5V0-21.21 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sage

5 months ago

Yeah, DRS should stay enabled for performance!

upvoted 0 times

...

Avery

5 months ago

Erasing disks before use? That's a hard no for me.

upvoted 0 times

...

Mammie

5 months ago

Surprised that people still forget about KMS trust!

upvoted 0 times

...

Reena

5 months ago

I think option C is misleading. Old data won't be encrypted automatically.

upvoted 0 times

...

Jesusa

6 months ago

Definitely need to trust the KMS first!

upvoted 0 times

...

Vanesa

6 months ago

I don’t think disabling DRS is necessary for encryption, but I can't recall if it affects the process. I feel like trusting the KMS is definitely important.

upvoted 0 times

...

Rosalind

6 months ago

I’m a bit confused about whether I need to enable encryption by default for existing data or if it only applies to new data.

upvoted 0 times

...

Graciela

6 months ago

I think I came across a similar question in practice exams, and I feel like trusting the KMS is crucial for the encryption process.

upvoted 0 times

...

Lavonne

6 months ago

I remember reading that enabling encryption on a vSAN cluster requires some careful steps to avoid data loss, but I'm not sure which option is the right one.

upvoted 0 times

...

Wade

6 months ago

Option D about disabling DRS seems a bit odd to me. I don't think that's the right approach for this particular task. I'll focus on the encryption-specific steps.

upvoted 0 times

...

Edward

6 months ago

I'm a bit confused. Does the 'Erase disks before use' option really apply here, or is that for a different scenario? I'll need to review the details.

upvoted 0 times

...

Melita

6 months ago

I'm pretty confident that the answer is B. Making sure vCenter Server trusts the KMS is crucial for a smooth encryption process.

upvoted 0 times

...

Kerry

6 months ago

Hmm, this one seems tricky. I'll need to think carefully about the potential impact on the existing VMs.

upvoted 0 times

...

Phillip

7 months ago

Okay, let's see. The key here is to ensure no data is lost during the encryption process. I'm leaning towards option B, but I'll double-check the details.

upvoted 0 times

...

Roy

7 months ago

This is a good question to test our understanding of risk factors. I'll carefully consider each option and make sure I select the two that are clearly external to the company.

upvoted 0 times

...

Felicidad

7 months ago

I'm a bit confused here. Does JConsole really not support JMX Remoting? I thought that was one of its main features.

upvoted 0 times

...

Soledad

11 months ago

Ah, the classic 'trust the KMS' question. It's like asking a vampire to come in before you invite them. B is the only way, folks!

upvoted 0 times

...

Jamey

11 months ago

B) Definitely the way to go. Trusting the KMS is like locking the doors before you go on vacation - it just makes sense.

upvoted 0 times

Daniel

10 months ago

B) Definitely the way to go. Trusting the KMS is like locking the doors before you go on vacation - it just makes sense.

upvoted 0 times

...

Jacqueline

10 months ago

A) Select 'Erase disks before use' check box when enabling encryption on a vSAN cluster.

upvoted 0 times

...

Tyisha

10 months ago

B) Make vCenter Server trust the KMS, either by trusting the KMS or by uploading a KMS certificate.

upvoted 0 times

...

Fredric

11 months ago

D) Disabling DRS? Really? That's like trying to put out a fire with gasoline. I'm sticking with B, the KMS trust is the way to go.

upvoted 0 times

Vicki

10 months ago

B) Trusting the KMS is the safest option.

upvoted 0 times

...

Matthew

10 months ago

D) Disabling DRS can have unintended consequences.

upvoted 0 times

...

Merrilee

11 months ago

B) Make vCenter Server trust the KMS, either by trusting the KMS or by uploading a KMS certificate.

upvoted 0 times

...

Youlanda

12 months ago

I'm going with B as well. Trusting the KMS is crucial for a smooth encryption process. No one wants to lose their VMs, right?

upvoted 0 times

Mary

10 months ago

Yeah, making sure vCenter Server trusts the KMS is key for a successful encryption on the existing vSAN cluster.

upvoted 0 times

...

Erasmo

10 months ago

Agreed, we definitely don't want to lose any data during the encryption process.

upvoted 0 times

...

Wilbert

11 months ago

I think B is the way to go. Trusting the KMS is important for encryption.

upvoted 0 times

...

Alyce

1 year ago

I'm not sure, but I think option A) Erase disks before use might also be important to ensure no data is lost during encryption.

upvoted 0 times

...

Alonzo

1 year ago

I agree with you, Floyd. Trusting the KMS or uploading a KMS certificate is crucial for encryption.

upvoted 0 times

...

Sharen

1 year ago

B) Seems like the right option to ensure the encryption process can be completed without any data loss. Gotta make sure vCenter Server trusts the KMS first.

upvoted 0 times