2V0-622D · Question #4
An administrator is attempting to access an ESXi host via the DCUI but is unable to do so. Which could be two possible causes? (Choose two.)
The correct answer is C. Strict lockdown mode is enabled on the host. E. The DCUI service is disabled on the host.. Two conditions that would prevent DCUI access are strict lockdown mode (which stops the DCUI service entirely) and the DCUI service being explicitly disabled on the host.
Question
An administrator is attempting to access an ESXi host via the DCUI but is unable to do so. Which could be two possible causes? (Choose two.)
Options
- AThe host in question has no out-of-band management capability (i.e. iLO/iDRAC).
- BThe SSH service is disabled on the host.
- CStrict lockdown mode is enabled on the host.
- DNormal lockdown mode is enabled and the administrator is a member of the Exception User list.
- EThe DCUI service is disabled on the host.
How the community answered
(62 responses)- A6% (4)
- B18% (11)
- C73% (45)
- D3% (2)
Why each option
Two conditions that would prevent DCUI access are strict lockdown mode (which stops the DCUI service entirely) and the DCUI service being explicitly disabled on the host.
DCUI is a local physical console tied to the host's display hardware and does not require out-of-band management interfaces like iLO or iDRAC to operate.
Disabling SSH affects only remote shell access and has no bearing on the availability of the local DCUI console.
In strict lockdown mode, VMware automatically stops the DCUI service as part of hardening, meaning no user can access the local console interface regardless of their permissions or Exception User list membership. This is a key behavioral difference between strict and normal lockdown modes.
In normal lockdown mode (not strict), the DCUI service remains running and Exception Users on the list are explicitly permitted to log in via DCUI.
If the DCUI service is explicitly disabled on the ESXi host, the Direct Console User Interface will be unavailable for any user, independent of lockdown mode configuration or user privilege level.
Concept tested: ESXi lockdown mode and DCUI service access
Source: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-E5B84B4B-8898-4BFC-9B8D-2C9EAB0E4C11.html
Topics
Community Discussion
No community discussion yet for this question.