2V0-622 · Question #227
An administrator is able to manage an ESXi 6.x host connected to vCenter Server using the vSphere Web Client but is unable to connect to the host directly. Which action should the administrator take t
The correct answer is B. Disable Lockdown Mode on the ESXi host through vCenter Server.. Lockdown Mode blocks all direct connections to an ESXi host, restricting management exclusively to vCenter Server.
Question
An administrator is able to manage an ESXi 6.x host connected to vCenter Server using the vSphere Web Client but is unable to connect to the host directly. Which action should the administrator take to correct this behavior?
Options
- ARestart management agents on the ESXi host.
- BDisable Lockdown Mode on the ESXi host through vCenter Server.
- CDisable the ESXi firewall with the command esxcli network firewall unload.
- DReboot the ESXi host.
How the community answered
(38 responses)- A11% (4)
- B79% (30)
- C8% (3)
- D3% (1)
Why each option
Lockdown Mode blocks all direct connections to an ESXi host, restricting management exclusively to vCenter Server.
Restarting management agents resolves issues where the hostd or vpxa services have become unresponsive, but does not change or disable Lockdown Mode configuration.
When Lockdown Mode is enabled, ESXi refuses direct connections via SSH, vSphere Client, or host UI, while vCenter Server-based management remains fully operational. Disabling Lockdown Mode through vCenter Server removes this restriction and restores direct host connectivity without requiring a reboot or other changes.
Unloading the ESXi firewall with esxcli is an extreme and insecure action that would not override a Lockdown Mode restriction preventing direct access.
Rebooting the ESXi host preserves Lockdown Mode settings and would not restore direct connectivity after the host comes back online.
Concept tested: ESXi Lockdown Mode restricting direct host access
Source: https://docs.vmware.com/en/VMware-vSphere/6.5/com.vmware.vsphere.security.doc/GUID-88B24613-E8F9-40D2-B838-225F5FF480FF.html
Topics
Community Discussion
No community discussion yet for this question.