nerdexam
IBM

000-221 · Question #222

In addition to enabling remote command execution, which task highlighted in the graphic below must be visited to enable an administrator with hmcoperator permissions to run HMC commands from another…

The correct answer is A. "Change Network Settings" to open pott 22. For SSH to work on the HMC, port 22 must be explicitly opened through the HMC network settings firewall, which is a separate step from granting user permissions.

Networking

Question

In addition to enabling remote command execution, which task highlighted in the graphic below must be visited to enable an administrator with hmcoperator permissions to run HMC commands from another server using ssh?

Exhibit

000-221 question #222 exhibit

Options

  • A"Change Network Settings" to open pott 22
  • B"Remote Operation" to indicate that this HMC can be operated from a remote host
  • C"Remote Virtual Terminal" to enable virtual terminal connections for remotely connected HMC
  • D"Manage Task and Resource Roles" to give the hmcoperator task role permission to ssh to the HMC

How the community answered

(35 responses)
  • A
    71% (25)
  • B
    17% (6)
  • C
    6% (2)
  • D
    6% (2)

Why each option

For SSH to work on the HMC, port 22 must be explicitly opened through the HMC network settings firewall, which is a separate step from granting user permissions.

A"Change Network Settings" to open pott 22Correct

The HMC includes a built-in firewall that blocks all ports not explicitly permitted. Even when remote command execution is enabled for a user account, inbound SSH connections on port 22 are dropped unless port 22 is opened via 'Change Network Settings'. This network-level firewall configuration is a required, independent step that must be completed before SSH connectivity is possible.

B"Remote Operation" to indicate that this HMC can be operated from a remote host

'Remote Operation' enables browser-based remote access to the HMC graphical interface, not SSH command-line access, and does not modify firewall port rules.

C"Remote Virtual Terminal" to enable virtual terminal connections for remotely connected HMC

'Remote Virtual Terminal' facilitates virtual terminal sessions to managed LPARs through the HMC, not SSH command access to the HMC host itself.

D"Manage Task and Resource Roles" to give the hmcoperator task role permission to ssh to the HMC

The hmcoperator role already includes the necessary task permissions for SSH command execution - the missing piece is the firewall port, not the role assignment.

Concept tested: HMC SSH port 22 firewall network settings

Source: https://www.ibm.com/docs/en/power-hmc/10.2?topic=hmc-configuring-network-settings

Topics

#HMC#SSH access#port 22#hmcoperator

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 000-221 Practice