2V0-620 · Question #115
Immediately after installing ESXi, an administrator observes that the Configure Lockdown Mode option is grayed out in the Direct Console User Interface (DCUI). What is the most likely explanation?
The correct answer is A. The host has not yet been added to a vCenter Server. The Lockdown Mode option in the ESXi DCUI is grayed out when the host has not been added to a vCenter Server, because Lockdown Mode requires vCenter as the sole management channel.
Question
Immediately after installing ESXi, an administrator observes that the Configure Lockdown Mode option is grayed out in the Direct Console User Interface (DCUI). What is the most likely explanation?
Options
- AThe host has not yet been added to a vCenter Server.
- BThe BIOS on the host does not have NX/XD enabled.
- CThe ESXi host is running in evaluation mode.
- DThe host requires a reboot before this feature is available.
How the community answered
(23 responses)- A87% (20)
- B4% (1)
- D9% (2)
Why each option
The Lockdown Mode option in the ESXi DCUI is grayed out when the host has not been added to a vCenter Server, because Lockdown Mode requires vCenter as the sole management channel.
Lockdown Mode restricts ESXi host access so that all management must go through vCenter Server, making vCenter enrollment a hard prerequisite for the feature. Without a vCenter Server association, there is no management path to enforce, so the DCUI option remains unavailable until the host is added to vCenter inventory.
NX/XD BIOS settings relate to hardware-level data execution prevention for VM security and have no effect on the availability of the Lockdown Mode option in the DCUI.
Evaluation mode affects licensed feature availability but does not control whether Lockdown Mode is configurable; the vCenter enrollment status is the determining factor.
Lockdown Mode does not require a reboot to become available; it becomes accessible immediately once the host is added to a vCenter Server inventory.
Concept tested: ESXi Lockdown Mode dependency on vCenter Server enrollment
Source: https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-F8F105F7-CF93-46DF-9319-F8991839D265.html
Topics
Community Discussion
No community discussion yet for this question.