An administrator wants to disable password-based SSH access for the nutanix user on a CVM to improve security. What action should the administrator take?

Question

Options

• ARename the nutanix user.
• BBlock port 22 on the CVM firewall.
• CEnable Cluster Lockdown.
• DDelete the nutanix user.

• A
  5% (2)
• B
  5% (2)
• C
  76% (28)
• D
  14% (5)

Explanation

Cluster Lockdown is a built-in Nutanix security feature that hardens SSH access to CVMs by disabling password-based authentication entirely. Once enabled, only pre-approved SSH public keys are allowed to authenticate. This eliminates the risk of brute-force password attacks against the nutanix user while still allowing authorized key-based access for legitimate administrators.

Why the other options are wrong:

• A (Rename the nutanix user): The nutanix user is a critical system account on the CVM; renaming it would break Nutanix cluster services that depend on it.
• B (Block port 22 on CVM firewall): Blocking SSH entirely would prevent all administrative SSH access to the CVM, including legitimate access, which is too disruptive for operations.
• D (Delete the nutanix user): The nutanix user is essential for CVM operations and cluster services; deleting it would cause the cluster to malfunction.

No community discussion yet for this question.