2V0-622D · Question #296
A security officer has issued a new directive that users will no longer have access to change connected network adapters to limit denial of service on a virtual machine. Which two correct virtual mach
The correct answer is A. isolation.device.connectable.disable = "TRUE" D. isolation.device.edit.disable = "TRUE". To prevent users from modifying or connecting/disconnecting network adapters on a VM, two VMware advanced configuration parameters must be set to TRUE to disable those capabilities.
Question
A security officer has issued a new directive that users will no longer have access to change connected network adapters to limit denial of service on a virtual machine. Which two correct virtual machine advanced configuration parameters will accomplish this7 (Choose two.)
Options
- Aisolation.device.connectable.disable = "TRUE"
- Bisolation.de.ice.edit.disable -"FALSE"
- Cisolation.device.connectable.disable = "FALSE"
- Disolation.device.edit.disable = "TRUE"
How the community answered
(26 responses)- A77% (20)
- B8% (2)
- C15% (4)
Why each option
To prevent users from modifying or connecting/disconnecting network adapters on a VM, two VMware advanced configuration parameters must be set to TRUE to disable those capabilities.
Setting isolation.device.connectable.disable = TRUE prevents users from changing the connected state of devices (connecting or disconnecting them) within the VM, directly limiting the ability to toggle network adapter connectivity.
This option contains a typo in the parameter name ('isolation.de.ice.edit.disable' instead of 'isolation.device.edit.disable'), making it an invalid configuration parameter that would have no effect.
Setting isolation.device.connectable.disable = FALSE explicitly enables device connectivity changes rather than disabling them, which is the opposite of what the security directive requires.
Setting isolation.device.edit.disable = TRUE prevents users from editing device settings on the VM, including modifying network adapter configurations - together with option A, this provides full lockdown of network adapter manipulation.
Concept tested: VMware VM isolation advanced configuration parameters
Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-F5F6B3E6-B3E8-4C5E-9A5E-8B3E6E3B3E8C.html
Topics
Community Discussion
No community discussion yet for this question.