When using vSAN Encryption, where does the Key Encryption Key persistently reside?

When using vSAN Encryption, where does the Key Encryption Key persistently reside?
A . in /etc/vmware/ssl on each vSAN host
B . in the KMS server
C . in a VM configuration file on vSAN
D . in the vCenter Server cache

View Answer

Answer: C

Explanation:

Reference: https://blogs.vmware.com/virtualblocks/2018/07/13/understanding-ve-booting-w-vc-unavailable/