2V0-622 · Question #21
To reduce the attack vectors for a virtual machine, which two settings should an administrator set to false? (Choose two.)
The correct answer is A. ideX:Y.present B. serial.present. Reducing VM attack vectors requires removing unnecessary hardware by setting the .present parameter to false for each device, which eliminates the device from the VM configuration entirely.
Question
To reduce the attack vectors for a virtual machine, which two settings should an administrator set to false? (Choose two.)
Options
- AideX:Y.present
- Bserial.present
- CideX:Y.enabled
- Dserial.enabled
How the community answered
(33 responses)- A94% (31)
- C3% (1)
- D3% (1)
Why each option
Reducing VM attack vectors requires removing unnecessary hardware by setting the .present parameter to false for each device, which eliminates the device from the VM configuration entirely.
Setting ideX:Y.present to false removes the IDE controller from the VM configuration entirely, eliminating the attack vector at the hardware presence level as recommended in VMware security hardening guides.
Setting serial.present to false removes the serial port device from the VM, preventing any process inside or outside the guest from accessing or exploiting the serial interface, which is a known lateral-movement vector.
ideX:Y.enabled is not a standard VMware VM configuration parameter for controlling IDE device presence; the correct security hardening parameter is ideX:Y.present.
serial.enabled is not the standard VMware configuration parameter for controlling serial port presence; the correct parameter for hardening is serial.present.
Concept tested: VMware VM hardware attack surface reduction via .present parameters
Source: https://www.vmware.com/security/hardening-guides.html
Topics
Community Discussion
No community discussion yet for this question.