VMware 5V0-21.21 Exam - Topic 3 Question 63 Discussion

Actual exam question for VMware's 5V0-21.21 exam

Question #: 63
Topic #: 3

[All 5V0-21.21 Questions]

An administrator wants to enable encryption on an existing vSAN cluster that already contains virtual machines.

Which additional step should the administrator take to ensure no data is lost during the encryption process?

ASelect 'Erase disks before use' check box when enabling encryption on a vSAN cluster.

BMake vCenter Server trust the KMS, either by trusting the KMS or by uploading a KMS certificate.

CEnsure that the vSAN Encryption is enabled by default on the existing cluster to encrypt old and new data.

DDisable vSphere Distributed Resources Schedule (DRS) on the vSAN cluster.

Show Suggested Answer

Suggested Answer: C, D

https://docs.vmware.com/en/VMware-vSphere/8.0/vsan-planning/GUID-031F9637-EE29-4684-8644-7A93B9FD8D7B.html

by Arthur at Jul 08, 2024, 09:35 AM

Limited Time Offer

25%

Off

Get Premium 5V0-21.21 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sage

3 months ago

Yeah, DRS should stay enabled for performance!

upvoted 0 times

...

Avery

3 months ago

Erasing disks before use? That's a hard no for me.

upvoted 0 times

...

Mammie

3 months ago

Surprised that people still forget about KMS trust!

upvoted 0 times

...

Reena

4 months ago

I think option C is misleading. Old data won't be encrypted automatically.

upvoted 0 times

...

Jesusa

4 months ago

Definitely need to trust the KMS first!

upvoted 0 times

...

Vanesa

4 months ago

I don’t think disabling DRS is necessary for encryption, but I can't recall if it affects the process. I feel like trusting the KMS is definitely important.

upvoted 0 times

...

Rosalind

4 months ago

I’m a bit confused about whether I need to enable encryption by default for existing data or if it only applies to new data.

upvoted 0 times

...

Graciela

4 months ago

I think I came across a similar question in practice exams, and I feel like trusting the KMS is crucial for the encryption process.

upvoted 0 times

...

Lavonne

5 months ago

I remember reading that enabling encryption on a vSAN cluster requires some careful steps to avoid data loss, but I'm not sure which option is the right one.

upvoted 0 times

...

Wade

5 months ago

Option D about disabling DRS seems a bit odd to me. I don't think that's the right approach for this particular task. I'll focus on the encryption-specific steps.

upvoted 0 times

...

Edward

5 months ago

I'm a bit confused. Does the 'Erase disks before use' option really apply here, or is that for a different scenario? I'll need to review the details.

upvoted 0 times

...

Melita

5 months ago

I'm pretty confident that the answer is B. Making sure vCenter Server trusts the KMS is crucial for a smooth encryption process.

upvoted 0 times

...

Kerry

5 months ago

Hmm, this one seems tricky. I'll need to think carefully about the potential impact on the existing VMs.

upvoted 0 times

...

Phillip

5 months ago

Okay, let's see. The key here is to ensure no data is lost during the encryption process. I'm leaning towards option B, but I'll double-check the details.

upvoted 0 times

...

Roy

5 months ago

This is a good question to test our understanding of risk factors. I'll carefully consider each option and make sure I select the two that are clearly external to the company.

upvoted 0 times

...

Felicidad

5 months ago

I'm a bit confused here. Does JConsole really not support JMX Remoting? I thought that was one of its main features.

upvoted 0 times

...

Soledad

9 months ago

Ah, the classic 'trust the KMS' question. It's like asking a vampire to come in before you invite them. B is the only way, folks!

upvoted 0 times

...

Jamey

9 months ago

B) Definitely the way to go. Trusting the KMS is like locking the doors before you go on vacation - it just makes sense.

upvoted 0 times

Daniel

8 months ago

B) Definitely the way to go. Trusting the KMS is like locking the doors before you go on vacation - it just makes sense.

upvoted 0 times

...

Jacqueline

8 months ago

A) Select 'Erase disks before use' check box when enabling encryption on a vSAN cluster.

upvoted 0 times

...

Tyisha

8 months ago

B) Make vCenter Server trust the KMS, either by trusting the KMS or by uploading a KMS certificate.

upvoted 0 times

...

Fredric

9 months ago

D) Disabling DRS? Really? That's like trying to put out a fire with gasoline. I'm sticking with B, the KMS trust is the way to go.

upvoted 0 times

Vicki

8 months ago

B) Trusting the KMS is the safest option.

upvoted 0 times

...

Matthew

8 months ago

D) Disabling DRS can have unintended consequences.

upvoted 0 times

...

Merrilee

9 months ago

B) Make vCenter Server trust the KMS, either by trusting the KMS or by uploading a KMS certificate.

upvoted 0 times

...

Youlanda

10 months ago

I'm going with B as well. Trusting the KMS is crucial for a smooth encryption process. No one wants to lose their VMs, right?

upvoted 0 times

Mary

8 months ago

Yeah, making sure vCenter Server trusts the KMS is key for a successful encryption on the existing vSAN cluster.

upvoted 0 times

...

Erasmo

9 months ago

Agreed, we definitely don't want to lose any data during the encryption process.

upvoted 0 times

...

Wilbert

9 months ago

I think B is the way to go. Trusting the KMS is important for encryption.

upvoted 0 times

...

Alyce

10 months ago

I'm not sure, but I think option A) Erase disks before use might also be important to ensure no data is lost during encryption.

upvoted 0 times

...

Alonzo

10 months ago

I agree with you, Floyd. Trusting the KMS or uploading a KMS certificate is crucial for encryption.

upvoted 0 times

...

Sharen

10 months ago

B) Seems like the right option to ensure the encryption process can be completed without any data loss. Gotta make sure vCenter Server trusts the KMS first.

upvoted 0 times