Exam VMCE v12 All QuestionsBrowse all questions from this exam
Go to Exam
Question 28

The engineer needs to back up sensitive data located on VMware vSphere encrypted VMs. The company policy prioritizes data security over anything else.

In the backup infrastructure, the engineer has configured:

One physical proxy configured on the DirectSAN Access transport mode, for fast data transfer speed and less load on the production network

Two physical proxies in NBDSSL -

Encryption has been enabled on the backup job

Which action will allow the VM data to remain encrypted during the entire backup process?

    Correct Answer: B

    To ensure that VM data remains encrypted during the entire backup process, the job must use proxies configured with the NBDSSL transport mode. NBDSSL, which stands for Network Block Device over SSL, ensures that data is transmitted over the network in an encrypted form, maintaining the security of the data throughout the backup process. While the DirectSAN Access mode is efficient for data transfer, it does not inherently provide encryption during transfer. Hence, using NBDSSL is the best choice to meet the company's priority of data security.

Discussion
AnairdaOption: B

NBDSSL is for Network transport mode, in our scenario is used Direct storage access

Milan309Option: B

B https://helpcenter.veeam.com/docs/backup/vsphere/encrypted_vms_backup.html?ver=120

carbs0704Option: B

Per this article, it says "The backup proxy must be working in the virtual appliance or network transport mode". To back up VMware encrypted VMs, the backup infrastructure must meet the following requirements: VM encryption instances must be preconfigured in the virtual infrastructure: you must set up the Key Management Server (KMS), create the VM encryption policy, and assign it to VMs in advance. The backup proxy must be working in the Virtual appliance or Network transport mode: The backup proxy working in the Virtual appliance transport mode must be deployed on an encrypted VM. The backup proxy working in the Network transport mode uses the NBD protocol by default. If you want to use NBDSSL, select the Enable host to proxy traffic encryption in Network mode (NBDSSL) check box in the Transport Mode window. Note that traffic encryption puts more stress on the CPU of an ESXi host and can decrease performance.

cobranOption: C

so the correct is C