VCP Regulatory Compliance & Legal Framework 5

Question 1

Which vSphere encryption feature protects VM data in transit between ESXi hosts during vMotion migrations, satisfying encryption-in-transit requirements of multiple compliance frameworks?

Accepted Answer

vMotion Encryption

Answer

vMotion Encryption uses AES-256 to encrypt VM memory and disk state transferred between hosts, satisfying compliance requirements for encryption of data in transit.

Question 2

Under GDPR Article 17 (Right to Erasure), when a data subject requests deletion of their personal data, which scenario best represents compliant handling in a VMware environment?

Accepted Answer

Delete the VM and cryptographically erase all associated storage blocks containing their data

Answer

GDPR's right to erasure requires that personal data be irrecoverably deleted; cryptographic erasure of underlying storage ensures no remnant data remains recoverable.

Question 3

A vSphere administrator is configuring ESXi hosts for a FedRAMP Moderate baseline. Which FIPS 140-2 validated cryptographic mode must be enabled on ESXi?

Accepted Answer

ESXi FIPS mode via advanced system setting UserVars.ESXiFIPSMode

Answer

Enabling ESXi FIPS mode forces the use of FIPS 140-2 validated cryptographic modules for SSH, TLS, and other protocols, as required by FedRAMP Moderate controls.

Question 4

Which legal concept determines whether a cloud customer or VMware cloud provider is liable for a data breach involving customer VM data, based on their contractual division of security responsibilities?

Accepted Answer

Shared Responsibility Model

Answer

The Shared Responsibility Model defines which security controls the CSP owns vs. the customer, directly determining liability exposure in breach scenarios.

Question 5

PCI DSS v4.0 Requirement 10 mandates logging and monitoring. Which VMware tool provides centralized log collection and correlation for ESXi and vCenter audit events?

Accepted Answer

VMware vRealize Log Insight (Aria Operations for Logs)

Answer

vRealize Log Insight (now Aria Operations for Logs) aggregates, indexes, and correlates syslog and audit events from ESXi and vCenter, supporting PCI DSS Req 10 monitoring requirements.

VCP - VMware Certified Professional Practice Test

VCP - VMware Certified Professional Practice Test

VCP Regulatory Compliance & Legal Framework 5