Which three services can be enabled/disabled in the Security Profile for an ESXi host? (Choose three.)

CIM Server is a service listed in the ESXi Security Profile that enables hardware monitoring via the Common Information Model protocol. Administrators can enable or disable it directly from the Security Profile tab in the vSphere Client to control whether external hardware management tools can query the host.

Single Sign-On is a vCenter Server / Platform Services Controller component and does not run on individual ESXi hosts, so it does not appear in the ESXi Security Profile.

Direct Console UI (DCUI) is explicitly listed as a configurable service in the ESXi Security Profile. Disabling DCUI prevents local administrative access via the physical console, which is a common hardening measure applied alongside Lockdown Mode.

Syslog Server is a toggleable service in the ESXi Security Profile that controls whether the host forwards diagnostic and event logs to a remote collector. Enabling it is essential for centralized log management and security auditing in enterprise environments.

vSphere Web Access was deprecated and removed in vSphere 5.x and is not present as a configurable service in the ESXi Security Profile in any currently supported vSphere release.