Broadcom-VMware
2V0-622 · Question #21
2V0-622 Question #21: Real Exam Question with Answer & Explanation
The correct answer is A: ideX:Y.present. Reducing VM attack vectors requires removing unnecessary hardware by setting the .present parameter to false for each device, which eliminates the device from the VM configuration entirely.
Section 1 – Configure and Administer vSphere 6.5 Security
Question
To reduce the attack vectors for a virtual machine, which two settings should an administrator set to false? (Choose two.)
Options
- AideX:Y.present
- Bserial.present
- CideX:Y.enabled
- Dserial.enabled
Explanation
Reducing VM attack vectors requires removing unnecessary hardware by setting the .present parameter to false for each device, which eliminates the device from the VM configuration entirely.
Common mistakes.
- C. ideX:Y.enabled is not a standard VMware VM configuration parameter for controlling IDE device presence; the correct security hardening parameter is ideX:Y.present.
- D. serial.enabled is not the standard VMware configuration parameter for controlling serial port presence; the correct parameter for hardening is serial.present.
Concept tested. VMware VM hardware attack surface reduction via .present parameters
Reference. https://www.vmware.com/security/hardening-guides.html
Topics
#VM attack surface#hardware device settings#VM configuration hardening#serial device
Community Discussion
No community discussion yet for this question.