nerdexam
Broadcom-VMware

2V0-622 · Question #26

An administrator has been instructed to secure existing virtual machines in vCenter Server. Which two actions should the administrator take to secure these virtual machines? (Choose two.)

The correct answer is B. Restrict Remote Console access D. Prevent use of Independent Non-Persistent virtual disks. Securing VMs requires restricting Remote Console access to limit interactive attack vectors and preventing Independent Non-Persistent disks to preserve audit trails.

Section 1 – Configure and Administer vSphere 6.5 Security

Question

An administrator has been instructed to secure existing virtual machines in vCenter Server. Which two actions should the administrator take to secure these virtual machines? (Choose two.)

Options

  • ADisable native remote management services
  • BRestrict Remote Console access
  • CUse Independent Non-Persistent virtual disks
  • DPrevent use of Independent Non-Persistent virtual disks

How the community answered

(24 responses)
  • A
    17% (4)
  • B
    75% (18)
  • C
    8% (2)

Why each option

Securing VMs requires restricting Remote Console access to limit interactive attack vectors and preventing Independent Non-Persistent disks to preserve audit trails.

ADisable native remote management services

Disabling native remote management services such as SSH or ESXi Shell applies to ESXi host hardening, not to securing individual virtual machines running on the host.

BRestrict Remote Console accessCorrect

Restricting Remote Console access limits the ability of unauthorized users to interact directly with a VM console, reducing the risk of credential theft, unauthorized configuration changes, and bypassing OS-level access controls. This is a recommended hardening practice in the VMware vSphere Security Configuration Guide.

CUse Independent Non-Persistent virtual disks

Using Independent Non-Persistent disks would reduce security by discarding all changes - including logs and evidence of compromise - after each reboot, making it a poor choice for VMs holding sensitive data.

DPrevent use of Independent Non-Persistent virtual disksCorrect

Independent Non-Persistent virtual disks revert all changes upon power-off or reboot, meaning logs, audit trails, and forensic evidence are lost after each session. Preventing their use ensures that VM state and security-relevant data are retained for investigation and compliance purposes.

Concept tested: Virtual machine security hardening best practices

Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-95B7CF7C-75C0-4A98-A8BF-B1BECEAB9E24.html

Topics

#VM security hardening#remote console access#independent non-persistent disks#VM data protection

Community Discussion

No community discussion yet for this question.

Full 2V0-622 Practice