To reduce the attack vectors for a virtual machine, which two settings should an administrator set to false? (Choose two.)

The correct answer is A. ideX:Y.present B. serial.present. In VMware VM security hardening, unused hardware devices represent unnecessary attack vectors and should be removed from the VM configuration. The .present parameter controls whether a device actually exists in the VM - setting ideX:Y.present = false removes IDE storage…

Section 1 – Configure and Administer vSphere 6.x Security

Question

Options

AideX:Y.present
Bserial.present
CideX:Y.enabled
Dserial.enabled

How the community answered

(35 responses)

A
89% (31)
C
9% (3)
D
3% (1)

Explanation

In VMware VM security hardening, unused hardware devices represent unnecessary attack vectors and should be removed from the VM configuration. The .present parameter controls whether a device actually exists in the VM - setting ideX:Y.present = false removes IDE storage controllers, and serial.present = false removes serial ports. These are the correct parameters to eliminate the hardware device entirely. The .enabled option (choices C and D) is not a standard VMware configuration parameter used for enabling/disabling these specific devices; it is a distractor. The VMware Security Hardening Guides specifically recommend setting .present to false for any unused hardware to shrink the VM attack surface.

Topics

#VM security#hardware device settings#attack surface reduction#VM configuration

Community Discussion

No community discussion yet for this question.

Full 2V0-621 Practice