nerdexam
Broadcom-VMware

2V0-620 · Question #35

You have just installed an ESXi 6.x Host. As part of your company security regulations, a security banner must be presented on the console of the host. How can this action be accomplished?

The correct answer is A. Configure the Advanced Settings > Annotations screen of the ESXi host. ESXi supports displaying a security consent banner on the console, configured through the host's Advanced System Settings in the vSphere Client.

Section 1 – Secure vSphere Environments

Question

You have just installed an ESXi 6.x Host. As part of your company security regulations, a security banner must be presented on the console of the host. How can this action be accomplished?

Options

  • AConfigure the Advanced Settings > Annotations screen of the ESXi host.
  • BThis is configured from the Direct Console User Interface configuration menu.
  • CIt is not possible to configure a security banner for the ESXi host.
  • DFrom vCenter Server, this setting is configured globally in the vCenter Server configuration.

How the community answered

(36 responses)
  • A
    94% (34)
  • B
    3% (1)
  • D
    3% (1)

Why each option

ESXi supports displaying a security consent banner on the console, configured through the host's Advanced System Settings in the vSphere Client.

AConfigure the Advanced Settings > Annotations screen of the ESXi host.Correct

The ESXi security/consent banner is configured via the host's Advanced System Settings, where the Annotations section contains the key (such as Config.Etc.issue) used to store the banner text. Setting this key causes the message to appear on the ESXi console and DCUI login screen. This approach satisfies regulatory requirements for pre-login warning banners without requiring DCUI or vCenter-level global configuration.

BThis is configured from the Direct Console User Interface configuration menu.

The DCUI configuration menu does not expose an option for setting a custom security banner message; banner content is managed through the vSphere Client's Advanced System Settings.

CIt is not possible to configure a security banner for the ESXi host.

Configuring a security banner on ESXi is fully supported functionality, making this answer factually incorrect.

DFrom vCenter Server, this setting is configured globally in the vCenter Server configuration.

The ESXi console security banner is configured per-host in that host's Advanced System Settings, not as a global vCenter Server configuration.

Concept tested: Configuring ESXi console security banner via Advanced Settings

Source: https://docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.vsphere.security.doc/GUID-7B4FDE81-8E40-46F0-A1B7-5CE74B9DCD0D.html

Topics

#security banner#ESXi advanced settings#host security#console configuration

Community Discussion

No community discussion yet for this question.

Full 2V0-620 Practice