Broadcom-VMware
2V0-622 · Question #22
2V0-622 Question #22: Real Exam Question with Answer & Explanation
The correct answer is A: Disable hardware devices. VMware VM security hardening focuses on two main setting groups: disabling unnecessary hardware devices and disabling unexposed or unneeded VMware features.
Question
Which two groups of settings should be reviewed when attempting to increase the security of virtual machines (VMs)? (Choose two.)
Options
- ADisable hardware devices
- BDisable unexposed features
- CDisable VMtools devices
- DDisable VM Template features
Explanation
VMware VM security hardening focuses on two main setting groups: disabling unnecessary hardware devices and disabling unexposed or unneeded VMware features.
Common mistakes.
- C. VMware Tools devices provide essential guest OS integration such as time synchronization and management-plane communication; disabling them would break core VM manageability rather than improve security posture.
- D. Disabling VM Template features is not a recognized security hardening category in VMware guidelines; VM templates are a provisioning construct and do not represent a runtime attack surface.
Concept tested. VMware VM security hardening categories and review areas
Reference. https://www.vmware.com/security/hardening-guides.html
Community Discussion
No community discussion yet for this question.