ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 27 - VMCE_V12 discussion

Report
Export

The engineer needs to back up sensitive data located on VMware vSphere encrypted VMs. The company policy prioritizes data security over anything else.

In the backup infrastructure, the engineer has configured:

One physical proxy configured on the DirectSAN Access transport mode, for fast data transfer speed and less load on the production network

Two physical proxies in NBDSSL

Encryption has been enabled on the backup job

Which action will allow the VM data to remain encrypted during the entire backup process?

A.
Configure Global Network Traffic Rules to encrypt the backup traffic.
Answers
A.
Configure Global Network Traffic Rules to encrypt the backup traffic.
B.
Configure the job to use the proxies with the NBDSSL transport mode.
Answers
B.
Configure the job to use the proxies with the NBDSSL transport mode.
C.
Configure the job to use the proxy with the DirectSAN Access transport mode.
Answers
C.
Configure the job to use the proxy with the DirectSAN Access transport mode.
D.
Upload a custom script that re-encrypts the VM data after the backup job.
Answers
D.
Upload a custom script that re-encrypts the VM data after the backup job.
Suggested answer: B

Explanation:

To ensure that the VM data remains encrypted throughout the backup process, the job should be configured to use the proxies with the NBDSSL (Network Block Device SSL) transport mode. This mode encrypts data transferred over the network, adhering to the company policy that prioritizes data security. While DirectSAN Access is fast, it does not provide encryption of in-flight data.

Reference:

Veeam Backup & Replication User Guide: Transport Modes

Veeam Best Practices: Securing Backup Traffic

asked 23/09/2024
Leila Bekirova
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first