Exam 3V0-23.25 Topic 1 Question 95 Discussion

Actual exam question for VMware's 3V0-23.25 exam
Question #: 95
Topic #: 1

A SOC Analyst is reviewing the Ruby vSphere Console (RVC) output for a 12-node VCF cluster to verify Key Provider consistency.
```
[RVC Output: vsan.encryption_info ~cluster]
Host Encryption KMS Server KEK ID
esx-01 Enabled VCF-KMS-HA a1b2c3d4...
esx-02 Enabled VCF-KMS-HA a1b2c3d4...
esx-03 Enabled <Unreachable> a1b2c3d4...
```
esx-03 recently experienced a management network partition.
Why do the Virtual Machines hosted on esx-03 continue to read and write encrypted data seamlessly despite the Unreachable KMS status shown in RVC? (Select all that apply.)

A. ESXi stores the KEK in secure volatile memory (RAM); since the host was running when the network dropped, the key is already loaded, and standard I/O pipelines do not require active KMS polling. B. esx-03 automatically negotiated a peer-to-peer key exchange with esx-01 over the vSAN VMkernel network to retrieve the missing KEK. C. The KEK is persistently cached on the physical NVMe drives; ESXi reads the key from the disk during isolation. D. The vsan.encryption_info command only reports the control plane status of the vCenter-to-Host linkage; the dataplane inside esx-03 functions independently of the management network. E. esx-03 disabled encryption dynamically to maintain availability during the partition.

Comments

0 Satisfied Customers

0 Shares

0 Demo Downloads

10 Years in Business