nerdexam
Broadcom-VMware

2V0-622D · Question #4

An administrator is attempting to access an ESXi host via the DCUI but is unable to do so. Which could be two possible causes? (Choose two.)

The correct answer is C. Strict lockdown mode is enabled on the host. E. The DCUI service is disabled on the host.. Two conditions that would prevent DCUI access are strict lockdown mode (which stops the DCUI service entirely) and the DCUI service being explicitly disabled on the host.

Section 1 – Configure and Administer vSphere 6.5 Security

Question

An administrator is attempting to access an ESXi host via the DCUI but is unable to do so. Which could be two possible causes? (Choose two.)

Options

  • AThe host in question has no out-of-band management capability (i.e. iLO/iDRAC).
  • BThe SSH service is disabled on the host.
  • CStrict lockdown mode is enabled on the host.
  • DNormal lockdown mode is enabled and the administrator is a member of the Exception User list.
  • EThe DCUI service is disabled on the host.

How the community answered

(62 responses)
  • A
    6% (4)
  • B
    18% (11)
  • C
    73% (45)
  • D
    3% (2)

Why each option

Two conditions that would prevent DCUI access are strict lockdown mode (which stops the DCUI service entirely) and the DCUI service being explicitly disabled on the host.

AThe host in question has no out-of-band management capability (i.e. iLO/iDRAC).

DCUI is a local physical console tied to the host's display hardware and does not require out-of-band management interfaces like iLO or iDRAC to operate.

BThe SSH service is disabled on the host.

Disabling SSH affects only remote shell access and has no bearing on the availability of the local DCUI console.

CStrict lockdown mode is enabled on the host.Correct

In strict lockdown mode, VMware automatically stops the DCUI service as part of hardening, meaning no user can access the local console interface regardless of their permissions or Exception User list membership. This is a key behavioral difference between strict and normal lockdown modes.

DNormal lockdown mode is enabled and the administrator is a member of the Exception User list.

In normal lockdown mode (not strict), the DCUI service remains running and Exception Users on the list are explicitly permitted to log in via DCUI.

EThe DCUI service is disabled on the host.Correct

If the DCUI service is explicitly disabled on the ESXi host, the Direct Console User Interface will be unavailable for any user, independent of lockdown mode configuration or user privilege level.

Concept tested: ESXi lockdown mode and DCUI service access

Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-E5B84B4B-8898-4BFC-9B8D-2C9EAB0E4C11.html

Topics

#DCUI#lockdown mode#ESXi access#DCUI service

Community Discussion

No community discussion yet for this question.

Full 2V0-622D Practice