nerdexam
Broadcom-VMware

3V0-21.23 · Question #129

An architect is updating the design for a vSphere environment. During a workshop focused on security, the following has been identified: - It has been determined that any configuration of ESXi hosts…

The correct answer is A. Strict Lockdown Mode. Strict Lockdown Mode is the correct choice because it restricts all access to the ESXi host directly, ensuring that configuration can only be performed through VMware vCenter. This is in line with the requirement that configuration can only be done via vCenter. Strict Lockdown…

Design for security

Question

An architect is updating the design for a vSphere environment. During a workshop focused on security, the following has been identified:

  • It has been determined that any configuration of ESXi hosts can only be completed via VMware

vCenter

  • The Direct Console User Interface (DCUI) service must be disabled on ESXi hosts
  • The SSH service must be disabled on ESXi hosts

Based on the information from the workshop, which element does the architect need to include in the design?

Options

  • AStrict Lockdown Mode
  • BNormal Lockdown Mode
  • CNormal Lockdown Mode with a defined Exception User list
  • DStrict Lockdown Mode with a defined Exception User list

How the community answered

(55 responses)
  • A
    71% (39)
  • B
    16% (9)
  • C
    4% (2)
  • D
    9% (5)

Explanation

Strict Lockdown Mode is the correct choice because it restricts all access to the ESXi host directly, ensuring that configuration can only be performed through VMware vCenter. This is in line with the requirement that configuration can only be done via vCenter. Strict Lockdown Mode disables the Direct Console User Interface (DCUI) and SSH services, which aligns with the customer's requirement to have these services disabled for security

Topics

#ESXi lockdown mode#DCUI#SSH hardening#security configuration

Community Discussion

No community discussion yet for this question.

Full 3V0-21.23 Practice