VCP-VVF IT Architectures Technologies Standards Practice Question
An enterprise architect is integrating vSphere Foundation 9.0 with an external hardware security module (HSM) cluster using KMIP. Which architectural standard ensures that vCenter Server securely establishes keys for VM encryption without exposing cleartext credentials?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Mutual TLS (mTLS) certificate authentication combined with KMIP-compliant key exchange.
KMIP (Key Management Interoperability Protocol) version 1.1 or higher establishes secure mutual TLS authentication and cryptographic operations between vCenter and the HSM.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Mutual TLS (mTLS) certificate authentication combined with KMIP-compliant key exchange.
Why this is correct
Correct. vCenter uses certificates for mutual authentication over KMIP to securely retrieve and manage keys.
- ✗
IPsec transport mode tunnels terminated on the ESXi management vmkernel interface.
Why it's wrong here
IPsec protects network transport, but VM encryption key management relies specifically on KMIP application-layer protocols.
- ✗
OAuth 2.0 token exchange via the vCenter Lookup Service.
Why it's wrong here
OAuth tokens are used for API session authentication, not HSM key lifecycle operations.
- ✗
LDAP over SSL (LDAPS) binding using shared secret service accounts.
Why it's wrong here
LDAPS is used for directory services authentication, not cryptographic key management.
About these practice questions
This VCP-VVF question is part of Courseiva's 517-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official VMware exam blueprint
This VCP-VVF practice question is part of Courseiva's free VMware certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the VCP-VVF exam.