VCP-DCV vSphere Security Practice Question
Which THREE of the following are prerequisites for configuring vSAN encryption? (Choose three.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
vSphere Enterprise Plus license.
Options A, D, and E are correct prerequisites for vSAN encryption. Option A: vSAN encryption requires a vSphere Enterprise Plus license (or equivalent, such as VMware Cloud Foundation). Option D: A Key Management Server (KMS) supporting the KMIP protocol is necessary to manage encryption keys. Option E: TPM 2.0 chip on each ESXi host provides a hardware root of trust for key storage. Option B (Intel SGX) is not required for vSAN encryption. Option C (all-flash disk group) is incorrect because vSAN encryption supports both all-flash and hybrid configurations.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
vSphere Enterprise Plus license.
Why this is correct
vSAN encryption is available with Enterprise Plus and above.
- ✗
Intel Software Guard Extensions (SGX) on ESXi hosts.
Why it's wrong here
SGX is not required for vSAN encryption.
- ✗
All-flash disk group configuration.
Why it's wrong here
vSAN encryption works with hybrid and all-flash.
- ✓
A Key Management Server (KMS) supporting KMIP protocol.
Why this is correct
Keys are stored on external KMS.
- ✓
TPM 2.0 chip on each ESXi host.
Why this is correct
TPM 2.0 is used for secure key storage and host attestation.
Go deeper
Related to this question
About these practice questions
Courseiva writes every VCP-DCV question from scratch — 498 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This VCP-DCV practice question is part of Courseiva's free VMware certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VCP-DCV exam.