Exam 5V0-21.19 topic 1 question 11 discussion

Agree with Diegof1 explanation and Answer is A..the Key to the question is "Have Access to Encryption" and hence cannot be C

Agree with DenZn and DSA. Answer should be A. Reason for not opting C is that 'no Cryptography Administrator' is not permitted to Encryption operations.

C is right - the question asks which role ensures only authorized admins have access to encrypt. If you assign everyone the admin role, this does not ensure that only authorized admins have access to encrypt. If you leverage the no cryptography admin role, then you are ensuring that only authorized admins have access to encrypt.

I think the answer is C. The existing of this role allow you to have administrators with no encryption rights. If this role did not exists every administrator has the capability.

C is wrong: Users with the No cryptography administrator role for an object have the same privileges as users with the Administrator role, except for Cryptographic operations privileges. This role allows administrators to designate other administrators that cannot encrypt or decrypt virtual machines or access encrypted data, but that can perform all other administrative tasks. On the other hand, Only administrators with encryption privileges can perform encryption and decryption tasks. I think the correct answer is A.

This is a really badly worded question - could be either A or C depending on how you read it. I'd side with C as that would prevent access to encryption functionality, and it's fairly new, so would make sense that they would ask about it.

The correct anwer should be A https://storagehub.vmware.com/t/vsan-6-7-update-1-technical-overview/role-based-access-control-4/ vSphere 6.5 introduced the No Cryptography Administrator role along with the introduction of VM Encryption. This role is very similar to the normal administrator with many of the same privileges. Operations such as power on or off a virtual machine, boot, shutdown, vMotion, as well as normal vSAN management may be performed. However, this role is not allowed to perform any cryptographic operations.

C is correct, its a new role.