Which three services can be enabled/disabled in the Security Profile for an ESXi host? (Choose three.)

CIM Server (Common Information Model) is a service listed in the ESXi Security Profile that provides hardware monitoring and management interfaces to third-party tools. It can be enabled or disabled to control external hardware monitoring access on the host.

Single Sign-On (SSO) is a vCenter Server Platform Services Controller authentication service and is not managed as a service within an individual ESXi host's Security Profile.

Direct Console UI is the local text-based console interface on an ESXi host and is a configurable service within the Security Profile. Disabling it restricts local console access, which is a common host hardening practice.

Syslog Server is a service in the ESXi Security Profile that controls the forwarding of host logs to a remote syslog collector. It can be enabled or disabled and configured with a target log server address.

vSphere Web Access was a legacy browser-based management interface for ESXi that has been deprecated and removed in modern vSphere versions and does not appear as a configurable service in the ESXi Security Profile.