nerdexam
Broadcom-VMware

2V0-622D · Question #296

A security officer has issued a new directive that users will no longer have access to change connected network adapters to limit denial of service on a virtual machine. Which two correct virtual mach

The correct answer is A. isolation.device.connectable.disable = "TRUE" D. isolation.device.edit.disable = "TRUE". To prevent users from modifying or connecting/disconnecting network adapters on a VM, two VMware advanced configuration parameters must be set to TRUE to disable those capabilities.

Section 1 – Configure and Administer vSphere 6.5 Security

Question

A security officer has issued a new directive that users will no longer have access to change connected network adapters to limit denial of service on a virtual machine. Which two correct virtual machine advanced configuration parameters will accomplish this7 (Choose two.)

Options

  • Aisolation.device.connectable.disable = "TRUE"
  • Bisolation.de.ice.edit.disable -"FALSE"
  • Cisolation.device.connectable.disable = "FALSE"
  • Disolation.device.edit.disable = "TRUE"

How the community answered

(26 responses)
  • A
    77% (20)
  • B
    8% (2)
  • C
    15% (4)

Why each option

To prevent users from modifying or connecting/disconnecting network adapters on a VM, two VMware advanced configuration parameters must be set to TRUE to disable those capabilities.

Aisolation.device.connectable.disable = "TRUE"Correct

Setting isolation.device.connectable.disable = TRUE prevents users from changing the connected state of devices (connecting or disconnecting them) within the VM, directly limiting the ability to toggle network adapter connectivity.

Bisolation.de.ice.edit.disable -"FALSE"

This option contains a typo in the parameter name ('isolation.de.ice.edit.disable' instead of 'isolation.device.edit.disable'), making it an invalid configuration parameter that would have no effect.

Cisolation.device.connectable.disable = "FALSE"

Setting isolation.device.connectable.disable = FALSE explicitly enables device connectivity changes rather than disabling them, which is the opposite of what the security directive requires.

Disolation.device.edit.disable = "TRUE"Correct

Setting isolation.device.edit.disable = TRUE prevents users from editing device settings on the VM, including modifying network adapter configurations - together with option A, this provides full lockdown of network adapter manipulation.

Concept tested: VMware VM isolation advanced configuration parameters

Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-F5F6B3E6-B3E8-4C5E-9A5E-8B3E6E3B3E8C.html

Topics

#VM isolation parameters#network adapter security#advanced configuration#denial of service

Community Discussion

No community discussion yet for this question.

Full 2V0-622D Practice