nerdexam
Broadcom-VMware

2V0-620 · Question #115

Immediately after installing ESXi, an administrator observes that the Configure Lockdown Mode option is grayed out in the Direct Console User Interface (DCUI). What is the most likely explanation?

The correct answer is A. The host has not yet been added to a vCenter Server. The Lockdown Mode option in the ESXi DCUI is grayed out when the host has not been added to a vCenter Server, because Lockdown Mode requires vCenter as the sole management channel.

Section 1 – Secure vSphere Environments

Question

Immediately after installing ESXi, an administrator observes that the Configure Lockdown Mode option is grayed out in the Direct Console User Interface (DCUI). What is the most likely explanation?

Options

  • AThe host has not yet been added to a vCenter Server.
  • BThe BIOS on the host does not have NX/XD enabled.
  • CThe ESXi host is running in evaluation mode.
  • DThe host requires a reboot before this feature is available.

How the community answered

(23 responses)
  • A
    87% (20)
  • B
    4% (1)
  • D
    9% (2)

Why each option

The Lockdown Mode option in the ESXi DCUI is grayed out when the host has not been added to a vCenter Server, because Lockdown Mode requires vCenter as the sole management channel.

AThe host has not yet been added to a vCenter Server.Correct

Lockdown Mode restricts ESXi host access so that all management must go through vCenter Server, making vCenter enrollment a hard prerequisite for the feature. Without a vCenter Server association, there is no management path to enforce, so the DCUI option remains unavailable until the host is added to vCenter inventory.

BThe BIOS on the host does not have NX/XD enabled.

NX/XD BIOS settings relate to hardware-level data execution prevention for VM security and have no effect on the availability of the Lockdown Mode option in the DCUI.

CThe ESXi host is running in evaluation mode.

Evaluation mode affects licensed feature availability but does not control whether Lockdown Mode is configurable; the vCenter enrollment status is the determining factor.

DThe host requires a reboot before this feature is available.

Lockdown Mode does not require a reboot to become available; it becomes accessible immediately once the host is added to a vCenter Server inventory.

Concept tested: ESXi Lockdown Mode dependency on vCenter Server enrollment

Source: https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-F8F105F7-CF93-46DF-9319-F8991839D265.html

Topics

#lockdown mode#DCUI#vCenter Server dependency#ESXi security

Community Discussion

No community discussion yet for this question.

Full 2V0-620 Practice