A company's security team has requested that all IT resources be hardened. What should an administrator do to increase the security of the Nutanix environment?

Question

Options

• AEnable Cluster Lockdown
• BEnable Prism Central KMS
• CEnable Flow
• DEnable STIG

• A
  82% (14)
• C
  6% (1)
• D
  12% (2)

Explanation

Enabling Cluster Lockdown in Nutanix disables password-based SSH authentication for the CVMs and AHV hosts, requiring only SSH key-based authentication instead. This directly hardens the environment by eliminating a common attack vector - brute-force or credential-based SSH attacks. It is a recognized security hardening step aligned with enterprise security policies. Prism Central KMS (B) is for data-at-rest encryption key management, not general hardening. Flow (C) is a network microsegmentation product that improves VM-level network security but is not the primary answer for general environment hardening. STIG (D) refers to DISA security benchmarks and while Nutanix supports STIG hardening, 'Enable STIG' is not a single toggle in Prism - it is a configuration process, whereas Cluster Lockdown is a specific, directly actionable hardening feature.

No community discussion yet for this question.