To reduce the attack vectors for a virtual machine, which two settings should an administrator set to false? (Choose two.)

The correct answer is C. ideX:Y.present D. serial.present. Removing Unnecessary Hardware Devices Any enabled or connected device represents a potential attack channel. Users and processes without privileges on a virtual machine can connect or disconnect hardware devices, such as network adapters and CD-ROM drives. Attackers can use this

Section 1 – Configure and Administer vSphere 6.x Security

Question

Exhibit

Options

Akeyboard.present
BvmnicX:Y.present
CideX:Y.present
Dserial.present

How the community answered

(31 responses)

A
10% (3)
B
3% (1)
C
87% (27)

Explanation

Removing Unnecessary Hardware Devices Any enabled or connected device represents a potential attack channel. Users and processes without privileges on a virtual machine can connect or disconnect hardware devices, such as network adapters and CD-ROM drives. Attackers can use this capability to breach virtual machine security. Removing unnecessary hardware devices can help prevent attacks. Use the following guidelines to increase virtual machine security. https://pubs.vmware.com/vsphere- 51/index.jsp?topic=%2Fcom.vmware.vsphere.security.doc%2FGUID- 822B2ED3-D8D2-4F57- 8335-CA46E915A729.html

Topics

#VM hardening#attack surface reduction#virtual device configuration

Community Discussion

No community discussion yet for this question.

Full 2V0-621 Practice