What is the benefit of enabling lockdown mode on VMware ESX hosts?

Question

Options

• AImproves network performance.
• BRestricts direct access to the ESX host, enhancing security.
• CIncreases CPU and memory resources available to virtual machines (VMs).
• DSimplifies the management of virtual machines.

• A
  2% (1)
• B
  92% (49)
• C
  2% (1)
• D
  4% (2)

Explanation

Enabling lockdown mode on a VMware ESX host forces all management traffic to go through vCenter Server, preventing direct root-level access to the host - this removes a major attack surface and ensures all administrative actions are logged and controlled centrally (Option B). Option A is wrong because lockdown mode is purely a security control and has no effect on network throughput. Option C is wrong because lockdown mode does not alter how CPU or memory is allocated to VMs - that's governed by resource pools and VM settings. Option D is wrong because lockdown mode actually restricts management pathways, making direct VM management more constrained, not simpler.

Memory tip: Think of lockdown mode as "locking the side door" - it forces everyone through the front door (vCenter), so nothing can sneak in through direct host access. Security = restriction, not performance or resources.

No community discussion yet for this question.