試験3V0-23.25 トピック1 問題58 スレッド

VMware 3V0-23.25のリアル試験問題集
問題 #: 58
トピック #: 1

A Storage Administrator is replacing a vSAN Witness Appliance for a Stretched Cluster that utilizes vSAN Data-at-Rest Encryption. The original Witness Appliance suffered an unrecoverable boot failure.
The administrator deploys the new appliance via OVF and uses an automation script to configure the networking and encryption pre-requisites before running the vCenter "Change Witness" workflow.
```
# Cloud-Init / Automation Spec for New Witness
network:
vmk0: 10.10.10.150/24 (Management)
vmk1: 172.16.20.150/24 (Witness - MTU 1500)
static_routes: [ "192.168.0.0/16 via 172.16.20.1" ]
security:
kms_trust_establishment: "True"
host_key_retrieval: "Disabled (Metadata Only)"
```
How does the interaction between the encryption layer and the new Witness Appliance behave during this replacement process? (Select all that apply.)

A. The new Witness Appliance will require a "Deep Rekey" operation to generate a unique Disk Encryption Key (DEK) for its local cache device.

B. Disabling "host_key_retrieval" on the Witness is a valid optimization because the Witness only uses standard VMFS for its storage, not the encrypted vSAN datastore.

C. When the DOM syncs metadata to the new Witness, the metadata is transmitted over the wire unencrypted unless Data-in-Transit encryption is also enabled.

D. The new Witness Appliance must establish trust with the Key Management Server (KMS), because even though it does not hold payload data, it stores encrypted metadata components.

おすすめの解答：A,C,D 解答を投票する

大川** 2026-07-10 10:54:46

時間限定で

15%

オフ

プレミアムの3V0-23.25問題集のセルフテストエンジンまたはPDFをゲットしよう

試験3V0-23.25 トピック1 問題58 スレッド

コメント