NCA-6.10 Nutanix Certified Associate NCA v6.10 Free Practice Exam Questions (2025 Updated)

The correct answer isD. Software-only Encryption.

Nutanix supportsData-at-Rest Encryption (DARE)through bothhardware-basedandsoftware-basedmethods. Among the supported solutions,software-only encryptionis a widely used and officially supported method, especially whenSelf-Encrypting Drives (SEDs)are not in use.

Key facts about Nutanix DARE:

Enables encryption of data written to physical media.

Works at theCVM and controller layer, ensuring all I/O is encrypted before being persisted.

Software-based encryptioncan be enabled via Prism Central or command-line usingNative Key Management (NKM)orexternal KMIP-compliant key managers.

Hardware encryption (SED)is optional and not required for DARE.

Clarifications:

A. Storage Pool-only Encryption: Not valid; encryption applies at thecluster level, not only to storage pools.

B. Data-only Encryption: Ambiguous and not a Nutanix-supported term.

C. Cluster-only Encryption: Misleading; encryption is applied to data at rest, not to the "cluster" object.

Prism UI Navigation Path:

Settings > Security > Encryption

Official Reference:

Nutanix Security Guide – Data-at-Rest Encryption

Nutanix Bible – Encryption Section

Excerpt: “Nutanix supports software-only data-at-rest encryption using Native Key Management or external KMIP key managers, without requiring self-encrypting drives.”

Answer: D