Which action will allow the VM data to remain encrypted during the entire backup process?

The engineer needs to back up sensitive data located on VMware vSphere encrypted VMs. The company policy prioritizes data security over anything else.

In the backup infrastructure, the engineer has configured:

One physical proxy configured on the DirectSAN Access transport mode, for fast data transfer speed

and less load on the production network

Two physical proxies in NBDSSL

Encryption has been enabled on the backup job

Which action will allow the VM data to remain encrypted during the entire backup process?
A . Configure Global Network Traffic Rules to encrypt the backup traffic.
B . Configure the job to use the proxies with the NBDSSL transport mode.
C . Configure the job to use the proxy with the DirectSAN Access transport mode.
D . Upload a custom script that re-encrypts the VM data after the backup job.

View Answer

Answer: B

Explanation:

To ensure that the VM data remains encrypted throughout the backup process, the job should be configured to use the proxies with the NBDSSL (Network Block Device SSL) transport mode. This mode encrypts data transferred over the network, adhering to the company policy that prioritizes data security. While DirectSAN Access is fast, it does not provide encryption of in-flight data.

Reference: Veeam Backup & Replication User Guide: Transport Modes

Veeam Best Practices: Securing Backup Traffic