Exam 2V0-16.25 Topic 4 Question 23 Discussion
Actual exam question for VMware's 2V0-16.25 exam
Question #: 23
Topic #: 4
Question #: 23
Topic #: 4
The security team has requested that high-sensitivity workloads be protected using Confidential Computing in your VMware vSphere Foundation (VVF) 9.0 environment. These workloads handle regulated data that must be isolated from the hypervisor and other tenants, even when running on the same ESX host.
The vSphere administrator is responsible for ensuring that only trusted hosts are used and that virtual machines are configured with hardware-enforced memory isolation.
Which two configurations must you implement to support Confidential Computing for these workloads?
(Choose two.)
The vSphere administrator is responsible for ensuring that only trusted hosts are used and that virtual machines are configured with hardware-enforced memory isolation.
Which two configurations must you implement to support Confidential Computing for these workloads?
(Choose two.)
Suggested Answer: C,E Vote an answer
ForConfidential Computing in vSphere 9.0:
* Hardware Memory Isolation: RequiresAMD SEV-SNP (Secure Encrypted Virtualization - Secure Nested Paging)orIntel TDX (Trust Domain Extensions)enabled in the host BIOS and supported by ESXi. (C)
* Trusted Hosts: Must usevSphere Trust Authority (vTA)to ensure that only verified, secure hosts run Confidential VMs. The VM must have theConfidential Computing flagset. (E) Other options:
* A. VM Hardware version 22# Required for new features, but Confidential Computing specifically requires hardware + vTA.
* B. TPM 2.0 guest OS attestation# Not used for Confidential Computing, that's host-based attestation.
* D. Encrypted vMotion Required# Recommended for secure VMotion, but not sufficient for Confidential Computing.
References:
VMware vSphere 9.0 -Confidential Computing Requirements
VMware Docs: vSphere with AMD SEV-SNP and Intel TDX
* Hardware Memory Isolation: RequiresAMD SEV-SNP (Secure Encrypted Virtualization - Secure Nested Paging)orIntel TDX (Trust Domain Extensions)enabled in the host BIOS and supported by ESXi. (C)
* Trusted Hosts: Must usevSphere Trust Authority (vTA)to ensure that only verified, secure hosts run Confidential VMs. The VM must have theConfidential Computing flagset. (E) Other options:
* A. VM Hardware version 22# Required for new features, but Confidential Computing specifically requires hardware + vTA.
* B. TPM 2.0 guest OS attestation# Not used for Confidential Computing, that's host-based attestation.
* D. Encrypted vMotion Required# Recommended for secure VMotion, but not sufficient for Confidential Computing.
References:
VMware vSphere 9.0 -Confidential Computing Requirements
VMware Docs: vSphere with AMD SEV-SNP and Intel TDX
by Regan at Mar 27, 2026, 12:20 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).