2V0-622 · Question #26
An administrator has been instructed to secure existing virtual machines in vCenter Server. Which two actions should the administrator take to secure these virtual machines? (Choose two.)
The correct answer is B. Restrict Remote Console access D. Prevent use of Independent Non-Persistent virtual disks. Securing VMs requires restricting Remote Console access to limit interactive attack vectors and preventing Independent Non-Persistent disks to preserve audit trails.
Question
An administrator has been instructed to secure existing virtual machines in vCenter Server. Which two actions should the administrator take to secure these virtual machines? (Choose two.)
Options
- ADisable native remote management services
- BRestrict Remote Console access
- CUse Independent Non-Persistent virtual disks
- DPrevent use of Independent Non-Persistent virtual disks
How the community answered
(24 responses)- A17% (4)
- B75% (18)
- C8% (2)
Why each option
Securing VMs requires restricting Remote Console access to limit interactive attack vectors and preventing Independent Non-Persistent disks to preserve audit trails.
Disabling native remote management services such as SSH or ESXi Shell applies to ESXi host hardening, not to securing individual virtual machines running on the host.
Restricting Remote Console access limits the ability of unauthorized users to interact directly with a VM console, reducing the risk of credential theft, unauthorized configuration changes, and bypassing OS-level access controls. This is a recommended hardening practice in the VMware vSphere Security Configuration Guide.
Using Independent Non-Persistent disks would reduce security by discarding all changes - including logs and evidence of compromise - after each reboot, making it a poor choice for VMs holding sensitive data.
Independent Non-Persistent virtual disks revert all changes upon power-off or reboot, meaning logs, audit trails, and forensic evidence are lost after each session. Preventing their use ensures that VM state and security-relevant data are retained for investigation and compliance purposes.
Concept tested: Virtual machine security hardening best practices
Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-95B7CF7C-75C0-4A98-A8BF-B1BECEAB9E24.html
Topics
Community Discussion
No community discussion yet for this question.