You have already generated a 256-bit AES raw key and named the keystore file /mykey. You need to use the
key to create an encrypted file system.
Which command should you use to create a ZFS encrypted file system named pool1/encrypt using the /mykey
keystore?
A.
zfs create – o encryption = /mykey pool1/encrypt
B.
zfs create – o encryption = 256-ccm – o keysource = raw, file : ///my key pool1/encrypt
C.
zfs create – o encryption = AES keysource = /mykey pool1/encrypt
D.
zfs create – o encryption = on keystore = /mykey pool1/encrypt
Explanation:
Example: Encrypting a ZFS File System by Using a Raw Key
In the following example, an aes-256-ccm encryption key is generated by using the pktool command and is
written to a file, /cindykey.file.
# pktool genkey keystore=file outkey=/cindykey.file keytype=aes keylen=256
Then, the /cindykey.file is specified when the tank/home/cindy file system is created.
# zfs create -o encryption=aes-256-ccm -o keysource=raw, file:///cindykey.file tank/home/cindys