VCP-DCV vMotion Encryption Practice Question
A company is implementing vSphere 7.0 and wants to encrypt all vMotion traffic between ESXi hosts in a cluster. The cluster is not using any other encryption features. What is the minimum requirement to enable vMotion encryption?
⚠ Common exam trap
Candidates often mistakenly believe that vMotion encryption requires external configuration such as host profiles, AD, or a KMS. In reality, it uses built-in certificate trust and can be enabled directly on each host without any additional setup.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The ESXi hosts must have a host profile applied with encryption enabled.
In vSphere 7.0, enabling vMotion encryption does not require Active Directory, a Key Management Server, Enhanced vMotion Compatibility (EVC), or host profiles. The minimum requirement is simply to configure the vMotion encryption policy on each ESXi host (set to 'Required' or 'Opportunistic'). No additional infrastructure or profiles are needed.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A VM Encryption Key Management Server must be configured.
Why it's wrong here
A VM Encryption Key Management Server is required for encrypting virtual machines, not for vMotion traffic. vMotion encryption does not require a KMS.
- ✗
The ESXi hosts must be joined to an Active Directory domain.
Why it's wrong here
Active Directory domain membership is not required for vMotion encryption. vSphere 7.0 uses host certificates for trust, not Kerberos from AD.
- ✓
The ESXi hosts must have a host profile applied with encryption enabled.
Why this is correct
A host profile applied with encryption enabled is the minimum requirement because it ensures consistent encryption policy across the cluster, leveraging default certificate trust.
- ✗
The cluster must be configured with Enhanced vMotion Compatibility (EVC).
Why it's wrong here
Enhanced vMotion Compatibility (EVC) ensures CPU compatibility for vMotion, but is unrelated to encryption of vMotion traffic.
Go deeper
Related to this question
About these practice questions
One of 281 original VCP-DCV practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VCP-DCV practice question is part of Courseiva's free VMware certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VCP-DCV exam.